A858DE45F56D9BC9 archive

201302211559 18z62x

explained decrypted filler

3DES(name+title) ECB, 32 GUIDs, seed 574

Metadata

Post ID
18z62x
Title
201302211559 → 2013-02-21 15:59 on A858's clock
Posted (UTC)
2013-02-21 20:59:50
Timezone
UTC−5 · title 15:59 against posted 20:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302211559) = 4e97ea7b257568bab44023b42cd43be9 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
32
Filler GUID seed
new Random(574).Next(9) ✓ verified
Run
Probable run 3 (seed 33,600,187) (probable)
Draw
9 · predicted N = 32 ✓
Machine boot
2013-02-13 10:24–11:32 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listarctic-onlykey: name+titlerun: probable

From the post to its content

As posted (encrypted)

F4F859BC1CE60AD3 709F48B49CE5F18F 84AEFBC06FF64556 80B3DED0FB3D2D7A 941E720EFCE9D53F F477937988859F2E 6CFBD4321BF5315E 6710942D718E046A 721FFF4B73AE1AC8 CDE0CA361A1AAAE3 89E433FB0E60CFBF 9F3EA2478FE9A589 FE2F0C6A71F9B77D 513DD12BF090AEA8 6A29916A2529B85E F2685093568F82C2 C26119F2DE0F1BD5 33E03990015E4800 7A53BD8B13BD912F FDCE7CB8A411F8A7 D8753CFF862ACD44 851958F26F479262 C932EFAA7DF22DCB 5F12BF82A4B0EE98 85AE5FC805EF4CF7 7F066F77AF1E5734 8C2758D77E9888B1 D8CD1B18AE0E0786 E0CCA6A56B06B528 C41A41DEDB64DFAE 6C4D6DDCFCE3F76E C1454E63AC212C6E 441FCE1F48F00070 C11986640C3B51EF 0AF05DE948911676 62BF0254A89EC35C 06048E6B000F4B50 D8C31E14E0776272 6659BE23E3F38F70 99E3696A6D3416F6 353F304287201BED C329A4E76CF94378 529B70420B2BDFC6 E8A9304138C22CD8 65E14D024DB08C12 6D8F03D2F38EED15 2E0C09AE6256E679 9CCB1F7ACD38E68A 17ADB0672FA98D7A D9CD191FC8FCB39F 77348D733125212D F17360043A4AA30E 0D0F45B9DF4DE95F A7C71AF61AF3231D 1386A542F92183C5 ED5A6F273E46685A BBB83C2567D2AAD1 CF62A6A5086AFA49 8EF52A7143899733 1733935F8EA09AB6 9F1B27E7261F4F9A 3BFBE68E1C4BD13A B4259555F7FC8FDD A576CFAAEE1DA3DE 5CAC0BB2E2CF0FD5 93FECD526DC714A7 B84303F89349BFC0 B94B1733BAF5126E 8F4FD16B54D719A8 BCE802ECD179B696 F6F8192D94602FC6 DBB989B21915C0D8 E150EEA46412104D 519B09B2DFD223AC 964A51BA0EFD8F0A 7EAB7484E1E5DBF8 AFA76D9662EE5471 6EE88EBB09672450 60B6347B63DB87C2 4FCF1A0040BFD3F2 F20AE25B107195C7 FF35A81C5D139008 6110CEC0CAF24857 B2BCEA8D8C7B3D44 B5AA87902C647915 7A48505507AA598E 46FCAD14DD9E48CF 5773A83445BDF278 010489132D76E049 E3B513CFD70740E1 C09459ACF236D70B 20B5B3CC2EE10EEF 02112BED08AA9F9E C92915919B49B163 18D493245C20F2F8 FF9B3452E4CE07A2 B9B1E2E7EAED80F7 25FE390ABBBE1163 9D8A429CED19FB66 B1EF35B5425006AF 60239AA6A1E57F2E E050470A6AE43A49 7929E179DB191542 9C89F88207C4D0B8 D240CEA07219B1C7 DDA0711371F5DC24 567F4EFBFAE49D32 4BE3B0724FC6A7E6 CE271EC547CCEF56 2981876465C73999 4E3443FD9BAC68C3 41287DE5064E6111 31921602B5637FFB 73DCF9FDE69ADB97 7276E8A93EA17580 9F47F2DB2C5BB7C4 8ACFDC037424D1D3 05A0EAB709CEFE80 729AD3181605BF7E F165AF16B7BA075E 3898BE8E4CB86D78 218E89C5A95E0560 29491595230BBB12 92FCED3B7B077259 25DF3758706BE4C1 A9E020AB0134E0F8 B74D40EB8FC63BFF E347E3C5D141A3B4 FDDDB61B761D77B3
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302211559 (name+title). Key = MD5(password) = 4e97ea7b257568bab44023b42cd43be9, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 535c205d-6b34-5f97-91f7-54f098abd2d1
  2 a98cdf3c-1f7d-27c9-aacb-47380038267b
  3 167f43c5-2f19-84b4-a80a-3b393e0f3391
  4 a8d5cde9-e87c-021b-95d2-fedfd98a182b
  5 f07b1473-8c37-3604-af1e-1c701f67a348
  6 1f605939-ac77-1c72-8191-5f6d4e74e2b6
  7 e57d293c-a9b2-0fdb-9f28-866d13215e9a
  8 b68a6a99-a1eb-3aa9-9ceb-cdf0060e9bc2
  9 dc3fcb5f-b557-86a6-9d8c-b486a5623f36
 10 6f90850c-4fe7-80ea-9c4b-d53103032ec5
 11 fbc1fd7d-1bad-10f1-9d17-48e702a9257e
 12 977c2dbf-7336-5390-b3d6-618ec188574b
 13 74d0f324-55ab-20f6-b6c5-5a847cef49d4
 14 446f335d-47da-0851-8d30-32295a52d089
 15 ea978ccb-7e1f-6716-a0ff-236d57f935e7
 16 c6f09be8-a524-4496-aa60-e6dbec3af3f4
 17 a1641776-3fff-10c7-8c18-f089b9eb18ae
 18 baa8f123-3c15-79b3-935a-31463c6486f5
 19 076b09f6-3b9c-1f9d-bef5-bae6ebc91668
 20 a0e1a7a2-f824-50e4-b2a7-94b229c49075
 21 adbce7b8-e5fa-0170-810b-f55409c6b73e
 22 169b8059-62f3-6052-a9e5-989e0f83761a
 23 4238d7c9-9e0c-0ebd-8136-f038176cb651
 24 0449e570-b917-53df-b52c-90e44a966e06
 25 71853270-1ee8-89c2-8111-1074eba67133
 26 8a4d5d4d-330f-6d52-b8f1-b32a9a2f3ca3
 27 7d0ba3e0-4a1b-3874-b16f-586d101d70ec
 28 dc4f2e70-120c-373b-9ce3-540687afaedd
 29 7ac59a06-8027-08ec-b91d-c11a20c4a527
 30 94fdd57d-dd43-38c4-a976-2c93209d2cc5
 31 f2cb98d9-ba31-0dc1-b499-6591c5c2e93e
 32 37f217e3-5006-5e1e-a1d6-69bce25f466c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 52803103881520641715060586330305. Exactly this sequence comes out of new Random(574).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 9 of Probable run 3 (seed 33,600,187): new Random(33600187), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:24–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results