A858DE45F56D9BC9 archive

201304220831 1cuycl

explained decrypted filler

3DES(name+title) ECB, 32 GUIDs, seed 424

Metadata

Post ID
1cuycl
Title
201304220831 → 2013-04-22 08:31 on A858's clock
Posted (UTC)
2013-04-22 12:31:46
Timezone
UTC−4 · title 08:31 against posted 12:31 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304220831) = 3a4e1f23ffcdea7bcee0e9fb70bbe840 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
32
Filler GUID seed
new Random(424).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
65 · predicted N = 32 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

B2C1AC60FA51EE60 2614411B314DE2FE 7A6DA5E9ECEFC57F D22F9E9E152638A6 F8E4F5082A632A44 8763D28094CCEEE0 8EB23E6D936ABFDD 40DFB584CA325EDA BA44FA2AAD5D01C0 775B94492A7915B1 D4A59A3253745644 53031600FA5247DA 16172BA006B84620 EF67BC28004176BA 1E6283372AAEC6A7 5EA310BFF14F9B5A B5A1B71D51D94B3A 353A2A7D70FF9360 DF2966B11DEBB0EB B8516782E97FBFBD EFD8081D4F8BE5FB A13856E3CAD6B24F 5B3A49395E236DD5 8AA9F616D91F111D BBBCB3B45D9F8EDA 9088F59F392A33B0 F69F646357C8881A 1625E95F9FD04FF0 041F78409C4041FD 6ADF44742143048A 468EFAE7FB00AD08 5F4FED6FA6F077D4 A8FAA1F1A759D30B 588D3E25F31D0A41 1EC850E2CBF18431 664CD16ED6C13571 FAD292B4CCF19511 DC13787AB1F6F1B6 33AE88B9DD59BA11 BEAA008C5E6EE751 3C6BCE375EAFFE5D CD078BDF96CCE5D5 8F4378A72A8CC141 5BC689C361AE19C5 FE81F16FA61ADD44 676790F5651A5547 A4111E724A8B20CB 680C057067D763BF 7C1CC436936F2BBC 56A9B96CA5BDFF8A 243F8661B52C4B13 A7A3943375CB82D7 DD2F0E265CFBF6A1 C9BD4188900C40E6 E485EF7A1A8B322F DEC2A5014A68F506 DB36A02660EC7EB1 CC2E888A717B0BE7 5DF4F97CEDC83C97 0EC7A2E751C0653F 7B00BBAEC41BAA18 8364914B761E73F8 C3E3A9C4AC722735 F275FBAA8F774BDB D61E2B85642CDC93 BD6D7F0B99E39D7A C9C465853398586B 1C347F66609F25F4 FDE5FD0D13F0D4CD 78E01D5405D29156 4E15B49C56D4DA0B DBFB4A4DE953F943 B46EE08B5CBFA544 18CBD1EEC8DCDBC5 524AC2A9AFA559F4 2179214FBD8C65A1 E57A97D1DA1B5C30 D88DD1586A73371C 3E4CDCBEA29D8E02 1E7471CF73907D41 A132624A709819DE 532464BAA99C0457 AAA7C2A515CDE994 75C7A08D5E94F512 13BEE4D6ADF2B4B5 39B9E66A1FC035D1 16BE6D33D31A3BB3 D477C64F4A872895 6A1717F41371E385 35A16694D8EC5F11 BF4506695DA9BD13 3627CDA0024FF1E2 6FD1D2E0E820284B 4EA220F16739EEE4 9203ACE28393E8FD 9158178EE760F99A A0DBF7B001D1675B C047A78839B3DE02 4648EA6C9F8EC83D D14FDD1FCBE98713 4D20EF327CEC14E0 7F529BB7B2FCE448 C488E0E123977452 FDF7F94F725A4599 1F984F5C14A208B7 C6FC40BD0CF5C124 6FD299AD08B811F4 8B4EBAF4A23BDBA6 C0180AA27B042B98 640533B161216058 C1CBC80A55C1DE92 8B50AF92755C2E0B 2F2E94E6170DC60A 83F8A25AE8C8E330 451E92F8B0C382BE C267BEC7BCDD0E04 35C7D797FC582706 05747A55B91C6691 01069291FC3D43FA 9E69FA04BE576259 2FD1465655113B74 62F31A0206A5B366 450432B0F17AC84D 82BE9599C533EA6C 994A70EE8368E9E6 41792EC9E89AD58A 4F247672020C3274 4E1FBBDD114DD00D AB7A85A02FCAF5ED
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304220831 (name+title). Key = MD5(password) = 3a4e1f23ffcdea7bcee0e9fb70bbe840, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d52c02f0-23fa-2369-8b6b-271691f35666
  2 254a007d-0f3a-28b9-a059-695ede6255bd
  3 6d0a72fa-3f94-101f-b950-06e41eb36ec9
  4 12006268-9ff1-01b7-bc91-d2df3d61e292
  5 e4f7cedf-26b3-5208-85b6-508b46d0c5ec
  6 5e36b552-1ca4-099b-8f3f-2e48f6b8504c
  7 c04d8df5-476c-79fe-901f-472732162fc3
  8 02910b5f-308d-1100-bf2f-6e775910bb62
  9 16b8e382-99db-3ed8-88e4-70e4529868da
 10 f5eb09a5-5360-51ea-86ad-a109bad59f11
 11 fb2ae6b7-9e4c-54f4-9d60-40489ade4538
 12 a740acdf-3610-4df9-a3ba-a1654413d33a
 13 173f5c64-6d6a-1201-a423-bd69461c07d1
 14 54c9333b-0fac-00db-8f60-de53b01b3e88
 15 a13ac9be-2a28-6254-83c0-944db9b652b5
 16 beb958fd-d4c3-7ff7-b1dc-d71348e3fc39
 17 057b5e08-344a-009b-b42b-b67b1f8ef41d
 18 12a5f9c0-6539-7de8-acc3-a24d62984658
 19 316720e8-4109-15f8-896c-228ff249ee8c
 20 4164d6ed-5db1-401e-aa45-1ca10a9c482f
 21 13689e65-db23-1c21-904a-ca26b7a92512
 22 b6e9a12f-efb9-75b6-bb6d-3c18bcbe416e
 23 ec2e7901-2a30-5f4f-af82-03d2bb651317
 24 18f343dd-49f1-175a-87a5-9a9d33e1e959
 25 4e982cea-7b64-2e97-9a6a-24c3c327d2cc
 26 608e7136-3bef-2d6b-abd3-6faec949c9ae
 27 fedb47b8-acc8-4040-84f2-38d8e2ac6d8b
 28 f5af2750-99a8-3595-bdcc-2658024aa14f
 29 cdd99c23-1e29-5e37-9565-d744ec862b95
 30 d5585c35-0948-41d6-9b21-28e9eb9666ba
 31 aa288eea-59d7-6801-a3de-bef2ca3093a0
 32 2ee7a52f-efb3-1873-8029-d831e2d0de15

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 22105071355410670714175122435461. Exactly this sequence comes out of new Random(424).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 65 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results