A858DE45F56D9BC9 archive

201304060317 1bqt6x

explained decrypted filler

3DES(name+title) ECB, 32 GUIDs, seed 596

Metadata

Post ID
1bqt6x
Title
201304060317 → 2013-04-06 03:17 on A858's clock
Posted (UTC)
2013-04-05 17:17:57
Timezone
UTC+10 · title 03:17 against posted 17:17 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304060317) = 3c56dd90f95c39e30def0217d9df5259 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
32
Filler GUID seed
new Random(596).Next(9) ✓ verified
Run
Run 44 (seed 1,087,967,875) (seed)
Draw
91 · predicted N = 32 ✓
Machine boot
2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

41B6E775F3839340 85D0ED986D151C60 E2DDFF3AB72BFBB8 E96B8D6C3F07799E AEC3AE5CBBF7636A 04B099FD8C3DEEE6 F4D61F202F977118 26E580497FD4B7AB 8DA59347ED78110D C74B2006B4D90C6A 27BA00FA12C8AE24 37E0DF84B8AC67F5 86389C00580DB7F3 5FB10282C0EB8B45 5B298452B40A68D6 AE4D74B1B93026DD 3A4171F336B37CDD 33DAE55B1DC07B55 0D5D69B1CF2FC2DB D5A076775F6C0D8D E7079DB8791ECE62 879C4C5C75C47D13 AE3DC8E36CC9594D 05A67602C6FFB79D C1FC42D74064C9EF DA61180A90018EE5 74730783CB044125 C1C9FCD8251E5AC7 9337D93D97F2FFFA 20748ABF2D281C7A 83308C06BC401E9F 097373BB41148C9D 3B7FE3E8E2935380 CC2988822B6F8A8D AE44B23C647289CD 8E28CC9F8196B1F1 58D5CB5026676D1F 8A1A3BDCE0B8D08E 7738B4D0A0321F67 27676EB183DEDF4E 4C884CD54922FB67 21F1EF9B1EDF1417 C9574BC5A976A900 9901BDCC9A525CBD 7EFACC8238E0B1D3 F0E325A86B4489E9 1AA6CF59BCD60A57 BC72A762DADE9D72 6528C42FFBED03DD 7965D2A1AF8A918E 58E3D40F4B18F18E E4418CCD19C0F44C 6C3ECB8C944642EE 6D24DF4E7DCA3D16 933F3AB9E718E9D2 68E538B0CF60CE02 7FC861C8EB0EC01C 35216B32CB9B9363 55C5C898399EB235 FBA0A2698EB93154 1CF12E4F4125BCFB 9B936ECF12C53A89 80FCED8185A2EE3A 1E15C30A70E57083 42E101713980ED53 24B9DB2E80C71841 DB87BA4356FBB871 6A2588547B88CD5D 753FA1D59211E7AE D66D601AA86849B8 6A98386747E52B70 2C1E59D407655218 D6FCF7CBD5ADC200 4788B008596BAA24 FEC396454C65780F 17E056C9B88CF771 FED00A343E7D1054 92CDAD2EDF5F528A 8FE2FF37448A1083 2F5A37700D460714 A6F1001A221949FB 1B5F66ED2C0661D2 BF5C14669F6EB50B FBE3D5C98B46430D 5C7BE69DBE58878F 3D58FF1439CD8BA6 33946161A8696328 95B66FE0EEE1199F 5F3424AED24647A9 90EC979A2D62A245 062EFE1755DCCDCD 1DD77379ACAEBC3D 950EB9D0402BAC82 C420DF610653377F 9055111252485B35 721629FF274BB453 7E97626CCA73E634 5E1F38DC84D82D9B 09888C175EA6CCEC 026347016BC3AECE 81D5E90867EC5632 25A3CA94E5EE00A5 CF06BDCEB01E7D78 730FA5249DACBF61 AD2EC0CE7C43E337 B66AB6419FBF76B0 1407E32003EFA0C7 9D12EBE44501E127 6A4A79B220D83481 374B72CF7660F152 3430E5B5AB83ACED C464D7BCA01857F4 07287311BCDCEC2A 17BA28BEEC1F67BF 91A9DCB76A5E94E8 F9135C5C16BE0E05 58B0772C2A2C1731 F5033CC7FEDDEB89 5D3D1D7CFE0C6D6E 22CE5FBCE8B28C09 DAC4B196C6D44BD4 258A9CE3DABC4AF0 144011557CA9A662 A568A67D024038C7 C7C06839CAB40766 8A700014CED1CED4 747D2C443D4F173A 53F30CB09418DC38 866F3A8FDADFD816
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304060317 (name+title). Key = MD5(password) = 3c56dd90f95c39e30def0217d9df5259, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b6219aac-92da-04ec-a013-bd28b2617e51
  2 1e24bee7-6f03-6f49-a4b7-767740de9c10
  3 b9e98fc2-1961-30eb-a5bc-f31e79a99693
  4 9259e43d-e964-61f9-823e-c6a1c8ccaadc
  5 a1e84436-4738-2c87-b6a6-66415b698962
  6 63bb6afe-ff70-36b6-9bb6-56ee9c4d8f9d
  7 c13c1ebe-8dfb-8b80-a6bc-042b81f5c2f7
  8 632c0306-3f6f-4e2f-a4b4-52d0e3657986
  9 3f9c3c1e-73a6-6c3a-b2a0-e967c015c985
 10 baf55d80-ef3f-047e-8216-69307f7d6606
 11 1faa645e-9dc3-39dc-8bea-9a930fbea03e
 12 04b1d9d4-0e0e-6710-9b57-08565d794627
 13 901a52e6-43f4-35d2-9f2c-ffff1ecde181
 14 9fc80276-73bb-4a91-8a2e-5e04f24e5d9f
 15 578fd040-f3b8-1723-a3a6-8a31f03d2598
 16 73526ce0-25a7-2abf-98ff-38b06ba0cb0d
 17 636791ca-77da-3f3f-a45b-899d32b9a9ae
 18 c6b7b996-ccc2-4915-92d1-aa2cbc37db5a
 19 ca4cb73c-f6cf-71f5-b88d-cf92e76bfb84
 20 a9447be7-92b5-0f1a-8c10-f6766bd618e3
 21 a494fe97-6324-0818-8fe0-d8ebb52998bd
 22 e7c2a04e-32a9-06fd-a733-55d2c529eb10
 23 c3154568-7655-68fd-b11b-216cb05c6def
 24 301931b9-ad94-25fd-958f-54a5fec34258
 25 bf29bf4a-16ae-16dc-909c-40ee3002c73e
 26 f2b71431-0d23-7427-bbf2-c70668480579
 27 49ed353c-7e54-3586-b9fc-5b4e6bf46ca9
 28 03c2a726-4ad9-8744-a453-177990f1c426
 29 09ee53a6-8491-16e7-9742-d56b72cfd398
 30 51df76eb-9743-0ec8-9292-51bf7f0f0b6b
 31 0c9d4ae2-b659-186c-ab5f-c2c75efe2a24
 32 1fd62825-bfaa-3fb5-afc8-20e57e888f06

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 06362384603634123470006217381013. Exactly this sequence comes out of new Random(596).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 91 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results