A858DE45F56D9BC9 archive

201308112106 1k5kwa

explained decrypted filler

3DES(name+title) ECB, 40 GUIDs, seed 312

Metadata

Post ID
1k5kwa
Title
201308112106 → 2013-08-11 21:06 on A858's clock
Posted (UTC)
2013-08-11 18:06:53
Timezone
UTC+3 · title 21:06 against posted 18:06 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308112106) = 036ed48b78a804034959edf446308f37 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
40
Filler GUID seed
new Random(312).Next(9) ✓ verified
Run
Run 50 (seed 2,278,890) (seed)
Draw
47 · predicted N = 40 ✓
Machine boot
2013-08-05 20:29–23:29 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

472251A32384DF79 2D2356968AA1BE82 B0C538E7BCBE9D68 48E59EE61F2F9ADE A3CA923D73860C5D D6CB124A2F47A921 C35442C89C324043 68295BACF084F083 D45665EF428793EB 4128B187AA8D4A76 B071F8322B8FC62D A423272173ED699B 419A9EFD6CED0A15 015CEEFD820AF971 FAA2C12796813A74 06787F40707666B5 E6D9D4B571B1C2F6 CDFFB29570D79336 886A560A1F6CAD06 869E3063CD3A66A1 742201C85D8598FD 6A8C244FACAE4B21 037A09005A958E92 371269E6D5B5FFF3 A0662BC141E1499C 2552B0C18F90450E 6A8D95972E68F2C8 5E9289EC9BD51B37 F4C0230FCB841C3C 1F62D5D33B1DBACB E5BAC468B1F0B9E0 4E4991056738B93A 2A74FADD530D2761 F561BC4BF072356B 188CFD7A1BAC1CBC 019313C348E37DB8 DB8BDC91B3AABFA9 BBBDEC865FA1E146 75F26D67A7802B70 06E0765E47291009 8A6A2F3D61FE979F 8710FA9D4E2EFE14 09E766AA17C412DB 9639A25057B33E95 870020C084B9E5A2 940873DD1EB17422 B5636D30AF97AEE3 56A2C05AD0775851 4EDF5E7457068F3C F4D0E3C4455817C2 5B750EAD7C497C07 1B709D6A4AF9F098 7056AA9E0E2F937D 7307FE9B740C57F0 7856AAFD2F3924FB E22BC6BA1A4DCB76 4CBF2283B75D910F 5D9DDC65C61DBB57 F771229EF4DBCBFD EB82CF9E00224D54 9BDFDCCA2A9FB0A1 9DDD347B95049BCF 507CD077F95D0EC0 400AD41A85DBCB15 0AA74E4ECF1CE8C8 BBFCC250EBFCFB2F CA6FB12B8A5CF50F 50E0CF00A8B65716 D427AC99E10EEB60 5FF10FF4CB725FAE 3208BB30EC17021F 8820EE3C461F17A2 9BD9D2C8074F02B4 24E00280460AC3E5 D74D5DAF909F0F8C 11BC8C3F01C628D0 83641F56157EA4E2 8458A616D58DAF6B 4FC67A0D592FE328 38F0487CEEE2E2DE 769A1259D07AE002 8E03D36A94B0A9A9 1D640E4F7C6A3D5F 5BD0A3AF6A330E37 93B4CE1C6A33CC1E 876FB62519339275 3659B1AB7F57B3E2 93FB86386D7C9B4E 0CF6D67ADD23570D 118C2B4258375115 C05FCD01608A30CF 06BAFE25D5CF8CA4 D55A202973F06B40 F19A1EE6B9A6819D 4CEE57364918AF6B B5467209A7776BE3 738AED5EA877DD14 B304DB95A5B1096A BCE42358D915065F FCCCA2F6C0DF9620 710DB1AB2F051451 E35D5CF5230592E6 94CC3184590794EC 15ADB7992B2F0298 DE20ABA986FF769C E32EA7DC13B2A839 2A8EC5243CF920C9 935D1A871EB18C95 D2E8B1CBC05C5BBD C15C636CF31EDA1E C25DFBA6F2C717E3 F3B01BCE845ECD61 D313D006DC507586 6F90FBA93F86D2B1 AFCCF14E6EE5F42E B17D17967A7314D5 5C9237FFD3C2DE70 3A5B430771C0013B C9AA8D74BFFA08B3 82C1D237B4A3F7EA 65EACF12F7FFB9C0 96E3B0DB38001C6D DFAFAE99EA169C4B B1CF7B5E205B676E 25A8A245FEAE7C82 20F22DEC9EE07A01 C9ECE38A2FD34B15 9DB08B1B1C653239 3C7CA6B8E4AE1DEA 98B096282E4362EA BB9D624899BCF530 7973FE85E0A2359A 25221824755F2963 5C0EADC2475B2437 36181609B1420C84 98D81FF430E5C30F 406FE1A2AE7EDC79 2312F9173185A4D5 C716E14DBDDCBC51 CF35307D8D9C1B2A B599F1696C79D2F1 F10C878AA28DEE96 0F44E508A5B5AB1D 76D26563C631C8AF E4CD5990ED277C62 740E070BCE06CB1D 402F9D1A49AF21BD 99FA1FAFDA21B929 E0567C7C5773F5C4 910DB77D64A2F5F1 F8DBACB8788F67FC C1FD155FFAC46E68 6DD517DCFFBCB5D8 41E912DFBAE61C87 7DD703095793C836 CE4C686B090E5F23 196113AC74648D76 3F45970AF980CA3A 9816F2D4138680C0 43CF3A189ACC639B 86AB756B5E139DB7
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308112106 (name+title). Key = MD5(password) = 036ed48b78a804034959edf446308f37, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 7e3d8fe7-29be-6ca7-9fc1-e059c5bcd70f
  2 559c6f36-d80f-33e6-811b-1139b77c2be7
  3 df82db68-ef81-7f92-826f-6faadc475111
  4 9a7f3cb9-76d9-1228-8b0c-0a8c911052d8
  5 945c5588-b477-0d49-9eac-9c70b66a64c4
  6 6d28cbcb-2c97-1ed2-9a44-0b50b4782843
  7 87b8c075-bee4-6628-aaf5-4bb89d92d4ff
  8 ca106bca-621d-85cc-a3ce-00b765975922
  9 662b04ce-670e-5f1e-89af-e3a7490afe13
 10 25d7a282-90a4-2c89-ac96-01238bea0413
 11 7f2e706e-8845-16f5-9408-395369dfd86c
 12 85db6817-8f49-027e-9ac8-493256050f9d
 13 62117232-90d6-1d89-bd39-7c38d259f1c5
 14 1897c171-53c2-7f67-aec9-e3ad85dcd258
 15 d177dfe7-3543-3e5a-a21b-634c002162c9
 16 b0f0860b-6c53-7ecf-bd45-a802782eb7a0
 17 d65fbab7-1ee9-01de-96ac-0e513b0d9b53
 18 07935767-5141-3fa3-9830-2f3352299d98
 19 4f4fca45-29be-118a-a70d-4a3f3232c835
 20 f0f6662b-2eb3-1839-b32e-c95c5f52f8d2
 21 0d1cc690-62eb-2bed-9621-33d59e5f65a2
 22 cae457af-fcb4-34ef-ad2d-fae0b64be0c2
 23 f8f16a62-91ac-6c58-bac8-6c41e75cbb59
 24 cc5730bc-8362-0336-a080-4324ef8ec483
 25 08af10b7-8a26-2e14-ad39-1bebb7ff9175
 26 b61812f8-f8b1-14b5-b0fd-f97ee3e8a713
 27 a6442903-47d9-10c3-a948-83c0a693ac4a
 28 f22b7328-c8d2-0f75-b2fc-6c5ac885f2bf
 29 40353e01-348a-64d4-a715-e42c8e0aaf59
 30 9eb45365-5254-3d25-b631-605595b6f9f7
 31 4abb8c8e-f8ff-3c74-9d92-fa393b0a63d0
 32 b8e833ce-2127-5485-8954-ab983454fce3
 33 859c02f6-ba7d-69bc-b245-ea7d6df0ec7f
 34 5b8e9065-cfbb-7452-8945-b409595531de
 35 5103bfdf-8e91-5f1a-90c4-56a6079a027d
 36 7f62654c-ea2a-2dc2-9531-499b3d9bfdc3
 37 155af3be-8d82-4f4d-99ba-33c28ad304bd
 38 43ca8c79-739e-0601-85cc-96a29e897cd0
 39 af2d82e0-c413-6c11-b068-2b0c68be2a1d
 40 884e591d-d995-1a06-afc3-d0f9b43166b9

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6371016852101737031123602110633567524061. Exactly this sequence comes out of new Random(312).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 47 of Run 50 (seed 2,278,890): new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results