A858DE45F56D9BC9 archive

201308120006 1k5xev

explained decrypted filler

3DES(name+title) ECB, 40 GUIDs, seed 161

Metadata

Post ID
1k5xev
Title
201308120006 → 2013-08-12 00:06 on A858's clock
Posted (UTC)
2013-08-11 21:06:53
Timezone
UTC+3 · title 00:06 against posted 21:06 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308120006) = b6c43b1aac19061f7c0f1e9cd483b9da (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
40
Filler GUID seed
new Random(161).Next(9) ✓ verified
Run
Run 50 (seed 2,278,890) (seed)
Draw
48 · predicted N = 40 ✓
Machine boot
2013-08-05 20:29–23:29 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

97B0E9B968F10763 0C39FC15CD10B97D 6C125496F3100D28 A1E74F97238590BB 2BDA010EB65D97A8 6356EA649328F527 65F4BCFA48E1D3FE BE9BC355B632C1D7 D5F4ECD4C798FCF0 4AFA70F3480A71B3 9F048E3BBBEBAC91 4D274C1F4AE02893 11BB5D6D11E2962A 077C17C1953D099A A961543C758DB88F 88F4F4DF87C14E9A A6F33CC7B96B0600 D07EEB046DFC6A05 A49D5540416664CA C1A40F2108AA3A12 95AC445CC9C8831B 2AA253F7BBD6E4AD E7C7931E72D580FB 013EEA4294F795F4 6267C8914BA230A9 49E89EA8860DAB3E B23293C5CDA96E1D 5D5553989B03AF13 E8AD305D46458282 DC50065F6D20A1FA BEC526B136CB1902 F6EB8689EA8249F0 2B0E94529F345994 EA15B746BCC83CF2 7DB01D63702E3590 5E3BB3B974FDCC83 FB75EDDB56CF6174 692C0DCAB42B3D89 2016420E8E581B31 02B51953C40C0557 71766611C3FDBEC7 087819DADA20CD21 B97EABC2A2928866 EF7C3BC8B09620F0 337E9914C5ED99DE EDBBF82644E6C220 DEDEDEC6BC923399 B0B764F600420066 3FA2B00F9E153D22 0C7E052D78C3D6DA 95F735332A2C99B2 0201E90924E1FB9C 09BEC4BE89D372E9 649EFF1DBB937B56 54923203B216ECB8 D780E09BC668AFD5 624051523DE028B6 881C624575207672 17C810409FE4B822 6DB3D6822F2E4C5E 3C84EE113F7AF248 767D11481D343FA0 F9597DE0BA981A20 7C1173CE4EAE4EE6 9888E27784D478E2 2A37D79DC382DF44 D5B8FF44712EDF26 FCA8CC3768672B65 33162011C36504A3 23D95234D5DE4C6A EFFB823C4379D3BC 9155ADA3840CD1E0 34222026FC57A320 0A9B26B8355B08CA B9C763C8ABFBE3A9 1C6A6C448397B544 A66CFF5AAA1DB9F5 C0004784660757A8 97B3617AC1CB3884 B0C5CA95A8C2A1C9 09C93EBC070C4BB7 0DF1086335BE1C72 7AC7690C1CCB6A07 06C0F7F0A0044B85 CA8A34186E7077D2 5ACCD3F8846B8230 D29EC4D505F936DE 5EF9D546C03480D5 BC6E0C130EA13178 4CB46137E007F8E8 8D265AD973DE58F9 40D1AFD18B73374B 64D3A679824EDF30 2B5E2C92AA92E5C2 CA1ADF01BA238EA6 8BAB4AAC7FAC16DB F8CAF4EFD45D0A7D DBD673759DDD716C DC4AE5BFE9AC4D7C D5F6FDEFB20E61EB 78EB79322462EEAC D8488A4C7F8882BA 642D65E93A4FB22D 5664AEF38E7AA0E4 908ABF46BD86A13C 0B13F1B709FEE597 2E284233C9708F0F DA50D6A912A9F9D3 03DADB742F4ACAAE 041F50B9F6B7B9A8 81F598D8E1D37694 AFFF3BD088E3D5AF 63E2A630E41AF03F A5954B911E748A60 C252682F7BB46A92 81BA91BED12378CB 2CFE9B69FD8077D6 73975BF475E29FDF 25B87B98D6CF6681 CDA1AC715C9D47B2 6C63A346B5ED025B 8F187B1FE25EF873 C0B394674D79AC16 4F372222EF99299A 52B2BD219D747584 EF014A4C562D2ABD 9506F5A0441DAD24 55EB0E0F7AE34CBA BAB3039DFF900EDA 408892AE0B1150DE AC72D251FE17DC47 F6ABB7DDA6E84C2C 2190762B6F4E4367 06757749D6E2657E 4D47BFE9BCA4C17A 89AD5E09F5D17DCC E9E833169B7AE2A4 8AADDEE2447F7850 D6F6730CC80FF347 69C12F5087D2A22F 676C05C3A409A5F0 2099F0122D0926BF 2B875062E340CD8C C27048DEC0B5C23C AB01EF857176DF11 C1C383EB430212DA 2D79AB2C2B4B94DA B39ABE1D07F75764 09873F521E8089B0 B9F05B6C915F8EB4 282B30619E8D1789 7C2B68C900F69562 C6D4A24A89169954 4E2B25903FDFF0EA 5556F6A8C2539686 CC56319B1DED532E 7E5963B051F09221 8EBA8550CA19D297 B53459B788255E35 C46F21992CEA54B4 F1262FD43DF08099
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308120006 (name+title). Key = MD5(password) = b6c43b1aac19061f7c0f1e9cd483b9da, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ebf9ce34-9bae-7012-ae03-db67dd6436d0
  2 313e8357-17d5-0402-8779-d8c35476dc65
  3 69f17ccb-631f-29ac-ade4-fb4ab1128160
  4 ff53ad39-fad1-845b-a199-9084d2844d90
  5 21a2e699-976f-8298-83bf-6255e2837ce8
  6 8a1f1397-f3b1-227c-9fa4-038dfa16562d
  7 8fadb4a2-ed7c-0962-a4b3-1eb1e523870d
  8 4da1fc9e-05a6-1421-b7f8-eb77b18c2781
  9 2a18b8ed-931c-86ce-9284-2b97d49cbb8d
 10 bd670c79-d332-5cc1-85c1-91f3f297b808
 11 e690151d-ab10-8aac-adf9-d4d88389ec65
 12 aaab1749-9e32-1ee0-aa7d-a97b4e878001
 13 8685ddbf-35e2-2622-bbf1-8559822fb931
 14 af825089-daa4-2e0f-8f72-c91677c4162c
 15 79574246-7f30-65a1-8327-5b7d2b89ca13
 16 58fbedb5-e88a-53fb-9a8d-0193fa01e159
 17 a6e975b9-ce0b-492d-89e4-4ccb2c6ce05a
 18 bda3d04e-0806-7f5e-8d8b-126b6552c9d3
 19 8a6522bf-a56a-0a2f-b294-9f48b42ad704
 20 20cc7288-c2c4-5b58-af67-11a4a4b390fe
 21 ea02c96e-d9a1-17af-9f8d-4a7035ca352a
 22 79fcb139-eec3-3ce1-8312-0fe8d033ea69
 23 50a4bf38-b0d3-107f-8d78-9429b387016c
 24 04d0a5d3-9039-21d2-980c-02c92f0d7ada
 25 a6d545fc-64c2-4cea-ad4e-24a61ed3d2e9
 26 f7ac8565-71ae-0a79-acea-7c2470094df1
 27 86ec084d-3d67-3c74-a14a-e1ffb2b313ab
 28 17e90d78-5c44-431b-b1e1-64a85b5d7cc4
 29 d98d32f9-8e32-0ba7-8ebc-c07ee9b8f213
 30 92f6f6e9-8425-699a-801d-ccc857989dd1
 31 5137362f-e31d-56c7-9af3-1289d6d571e0
 32 55905089-9e4d-7031-b71a-fc7f8ed5b234
 33 75938dbf-97aa-0266-9bc5-c74842be7544
 34 a85a296b-ff23-0254-a918-7a00e4d78435
 35 054820db-6e17-7c3e-9129-7ad4578aac64
 36 07180d29-f66c-654e-baff-b79a48e337c4
 37 8a67d1d8-3d06-310e-884d-f779c5184065
 38 369ff1e7-d26e-0b86-a47d-0fb149aca570
 39 5b8c098d-5e86-8977-993d-2fa7f1a5c8b3
 40 39d34570-cd25-3af2-aa36-8ed6c95d6881

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7028820185812265470513124034065700763083. Exactly this sequence comes out of new Random(161).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 48 of Run 50 (seed 2,278,890): new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results