A858DE45F56D9BC9 archive

201303051950 19qsc0

explained decrypted filler

3DES(name+title) ECB, 32 GUIDs, seed 383

Metadata

Post ID
19qsc0
Title
201303051950 → 2013-03-05 19:50 on A858's clock
Posted (UTC)
2013-03-06 00:50:49
Timezone
UTC−5 · title 19:50 against posted 00:50 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303051950) = 0113633c453e3542a13af0dc41f84ecd (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
32
Filler GUID seed
new Random(383).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
201 · predicted N = 32 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

276C13585B10F1B3 386F785A54C9EEE9 FD2146DECC803086 BCE6DF7F48D3130D 278491AD96C583E1 221E9FEBCAEB3D8B 9D597E1C1DB40D15 2C87DCD896E7B120 638F80B6DF984721 6FE246DD56C35E29 FB83D3ACBDC02F03 9FB3DE9B52F56E86 6CB831CF26D2A3DA 2CCF4A5436FA3773 1A2A61E43682DB1F B4B359678B6D2060 F3FF166C0922896E 7101596ECC32EBE3 AD3B4985B3EF68A1 F2AF33CFF8FFDA07 89BE10F4B9B55CB0 C47DB15B32584B56 2B4FDD289CC480D1 09C9DD39CDA038C9 0A54F7E81EF1BD9E E16D3BE72ADADA76 034050627BF41A04 9712649F9B938767 BA52C00BFA7405EF 69DFE99109EA679C 570DCFA3D3450798 7202983D176B9625 1199EB817DDE7EE8 58DEE6D3ED83BDA7 7F06A6BF41C7EB25 A15A29E7300A71DE F6BB693089A81C88 6AAE4AB18DA7CD2E 53EEBB478575F702 7177C9815B546A5E 324BA7523DFE862A 5AB14908E9E2E249 34797E3559C5C4DD CD746372674BEF91 01FE88DD3CB7E774 B6D28FE0A3B7A991 9CC86F9C4337FAD8 B1C4E0D410FFF8A3 D8312363BA52B314 52C62B058EFA48C6 28ED3CB1088D5B6A 7F31A6039221C54C E565F0EE36455C17 01601E39EFFCFBC8 51E8F42243727104 DC491C2811C57CCE 788379BEC1764040 8848D39311C536C7 119327AFF763CCEC 475C4C834F4EE3FF F09AB690B2CC2BF6 95DAEAC2DEA206AD AE6C2BFE01A5E2F0 C8864EBA46D6107C 968F2B761AB3A0C1 3E45AE144D3834DD 2C088DF667E6C24F 09AF44AA9405D572 91BF19250FA6CD40 55212146EC8B3D31 A4B78EB69951D221 E69836E2CE7E8FC0 703961191BA576DA EB0057E53D9C8831 88100030491F4DDC C0ACFA1D424A9D4A 1B72106CA96AFC90 B7A5E573A62CF83D 302CE60B51B94AD8 B39C0E2AF878BB4D 9B01246C8295BD8D 4E363D6E8ED28585 77B8BA9977C5043B 3EB701F5AD8D8EEF F7CEA0B668C53A21 3759BAFD2C3B9CBA 5CB40FBA4CB6D9F5 840772C595FE259E D8E61AC947EEA46B A82D9238B699A8A7 91D150AAEF91A12C 758D393EA9461ABA CF8B8E3D0D80492C AEF98A63B8D5F7B0 686B5F639612365A 5E23665343CB19DC 602E817C494EEA38 67497694D420988E FDC3BC9273B41B2C FCBB5C8C55961483 58525EF2FD181615 77A7DAAB275E188A 227D4492E37BC7AC 7231078C0BD78FB0 F6675638F46420BE 1B9BAF8C67E9C017 5794EB744EBCA1B5 0476862DE6C38B84 849AFA8150EE9AEA 70BFBB50DF5495E0 6D7F355A4C04C8A5 ECB218B11648ABAA DF3C72AD0EB63817 6453CCA5C7724F3A 45A9BAF742DDFD45 8B6F66042FAB035A 4A4DC5F61DE904A5 1C867C0014AF0CBB DDDB99E5AE3D1144 99F3AAD5383145CC 9679325FA25A4FF3 F7D547B88F54331E 51D1C521965BE5CE E2FDE5444F316E33 CC9DB19DE4025F3C A7F9DB15CB6F5FA6 2C55D6BE0DFDBD0B 2B789F2589594549 40F0CC7C2B860D7C
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303051950 (name+title). Key = MD5(password) = 0113633c453e3542a13af0dc41f84ecd, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d71426b2-6098-78e1-8b93-743462701cc2
  2 775e7ae8-8544-1071-be05-3653beb8f7b7
  3 cc55d673-9649-44de-a511-a1f7af6f501e
  4 b9d03aff-8fd5-2efa-9f97-f71b18d5a96b
  5 07e7bd4a-6bab-1b9d-9699-fffaf47b4026
  6 2858c1f6-5343-253d-971d-e23e6da1bae0
  7 c0f67a49-ab8a-4e93-8404-d1ddaa8341f3
  8 654e8d59-7d20-5ff4-a72f-d4177f633cb5
  9 96cdab42-fa91-30a1-b4f8-a9e3bc9a2d00
 10 65f4b2b1-d728-49af-931f-8f79625b2e0d
 11 c4a21b32-e7ae-4efb-9d66-96dc58cfab1f
 12 a4a6d85f-b680-4f80-833d-85b7dcf9c383
 13 9da3df8d-b926-8a62-ac2f-88486f5517d0
 14 7f023165-ba0a-67a4-892b-a46bb673853a
 15 0420c1b3-2c67-0036-b0be-25027c540055
 16 76c308e3-ad6d-1153-9804-16d159e27be2
 17 a472c054-d57a-7789-bc01-9cf45f564f9a
 18 0739f6a9-41d8-4d01-9a85-e2cc3a48fedd
 19 8ff4b455-86d2-093c-91ea-cd95d62cb3a8
 20 b4a17849-ce85-50fa-8bec-61e8b9b14874
 21 5057dc0c-6745-6f37-a345-0cfa2981011e
 22 18bf4c1a-d2af-7bcd-bd5c-e6c70e187519
 23 2f1762ae-8b5b-6f4a-bac4-30f660162545
 24 27322c8f-ea2d-7661-80d0-dc130ae29ecd
 25 89fc0231-1c59-26a6-bced-d270733ee9c0
 26 5f541056-7675-7cc3-8373-893028d7d795
 27 08a5e2cc-2b79-2a6c-ba19-c5b9e99cb494
 28 56949b60-1f0b-83a3-8bc1-6c1b33c33e23
 29 10c79bee-c466-35fc-8ff3-990ac4c7a404
 30 9ae89a6b-3ae8-4d72-8f60-49ef13b135e6
 31 bd81a567-2062-5718-b87c-c882445138a3
 32 c94edb4e-0e05-368a-a44d-67a2f997b91b

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 71421245344486017405676727283453. Exactly this sequence comes out of new Random(383).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 201 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results