A858DE45F56D9BC9 archive

201206290023 vsb4l

explained decrypted filler

3DES(name) ECB, 27 GUIDs, seed 805

Metadata

Post ID
vsb4l
Title
201206290023 → 2012-06-29 00:23 on A858's clock
Posted (UTC)
2012-06-29 07:22:24
Timezone
UTC−7 · title 00:23 against posted 07:22 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,744 hex characters · 872 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
27
Filler GUID seed
new Random(805).Next(9) ✓ verified
Run
Run 9 (seed 449,725,219) (seed)
Draw
6 · predicted N = 27 ✓
Machine boot
F 2012-05-15 19:12–19:12 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

49095259BC2059D6 76C283C891D9C181 ADC7BCDF253110F2 D35532BAE75C4144 220C793A47F6216E 706F0114BF1A4D02 37A59D58F6028179 045C052473B3A6C6 71C221A3F5C87A9B 8D88A43E0F5C93B2 202DAD9EB2AFBBEE DADC7C54A14A1522 2BC71FBC0471CD56 82FF0D27131E73AB 61CE3724EDE0A0A5 81DDDA6B44145633 C031C046E4F4B582 13FEE98093ADC583 C0D044769A0E858E 4CB42B47B0A21755 308F4B5152501FC2 30E206AEC2EA4044 C9E07B5B670DCFD9 83A53A47A977713D F92CF19B6C73E6EF EFFB5891BF0C0126 6F59F107E1C91238 CAECAF1B1A4D552B 7575C61FE3BDDB78 93E577786B7541FB DF21A30535321D6A 72D1733883E365B6 4B89F82CDAEF9604 3E8B7B4B5B9D8AEE 0DC7707D9A175BBB B89761232FD720CC 8E158626196B636A 91ED07F2A5663649 8DD3ADF6615B41F0 61AEA175BBE19F0C 349D8A6FF3F5F8B9 B5F1F2F0957A65FE C1E543DAAD79D5EF 0241D6DFBD6E83B9 3240C7B92A658B47 95100777F64CDEA2 63A50E118C7666E4 3F1DE459B942EC04 1E025A29EF1F8CB4 BD83D08A506DA2E5 9C312703AD58E69D 1945466EEE30E6B5 D60867434E0F2DEE 996D5C714C3521C1 11F5A5CAE029B197 4F972B382CC04B98 F3F4EAC3AECBF99E E4EFFB26C8AED758 1F026381CEC59A43 BA97FEAD56E1868B C1C2DE7F5C98C985 44E84DD09887C761 3F835FD32DB48E80 F97205D40F441C74 A6FCDA6EDFE0F3BB 0750438C7CFDFB88 6B93853A6C3D7924 22AE888607B04269 518AE7A99212E9DE 8C471B9F2139CB74 0A410989D1722E83 2EF7B045906BA56F D3ED4BA443AE4F3A 2E282D01E7DAB04F 9BC65DCBC3218ED8 813FC789E676F5A7 BE53FE9FD2E126FC 1A7D3A6ED5F622CA 88A25406BE9018EC 4DA81C2D7281A0EF D3C5F50710366BB9 00E28216304B2970 BED3CA27989A2011 524CD69787E01532 CDFCCFF49267355F 3A19CD6EA59244DB 183EB0DF4901E6E5 55E067E167DC89FC 741AD8A7E9BEE295 2712AB418DB67095 1D49F7741F56D040 2300D4EF058B579D 3EA1171BB918D6C5 D00C50C375BAF3C9 295B619ADFF3A06F 17A0F4C061002BC9 07587DE967206A9E B567371712AFFA42 A771085437EEC930 428F27D18E535A1E A7528D21B756233F F3120A3D47B39D7F C5A9348B4B6EE67F 2E2643F3E47724A9 6817F4A123BB238A C8C40356007DBD4E 7C00A110E27496C7 AB743BE2BC74E379 5DACFFBA8FF64DBD
  • Read the ciphertext. Strip whitespace: 1,744 hex characters = 872 bytes = 109 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 27 GUIDs as hex (shown below).

Decrypted: GUID list

  1 94ea5054-426c-299f-9bd4-74cefbf5fe2d
  2 9fd914df-5b47-060d-87fb-89ae72714dae
  3 50815e77-f7ec-4d21-b434-e10ea46a5e95
  4 537dae92-d0c1-3a0d-abbb-59e8eaa05efe
  5 5302b09b-eef0-5003-9e10-7452ce7b7995
  6 3fc6b8b9-0e28-0f18-92f6-074bbae2b65e
  7 a3eaa7ed-a4b1-5998-a581-abf22b733b90
  8 2c356e42-33f6-28ca-bbed-972e51c72742
  9 07c216ff-fe60-5915-bd29-6f1cecd86c9e
 10 afee30a7-6f27-1570-bff7-b3c5a6354cbb
 11 1a5352fa-39d9-351e-9af5-a4c1b3dc6278
 12 3ced459e-07f3-8bb7-98dd-d27f877746ba
 13 acc57d02-d4b6-0084-92dc-3e0ca6ed928e
 14 c691adf8-c594-2bbb-86d0-0508441c5263
 15 84ab5fe7-c0d8-4b26-aa41-6f9b667a83e3
 16 133f01a0-d1f7-6c28-8933-797e1d1fde3f
 17 485b0a91-5e18-29d5-bde8-9bbb7a95cff1
 18 e8b118cf-f974-0be4-bea7-596b95520920
 19 5cbdf357-a557-4e8d-a0d6-a99d5404c3d4
 20 c4112933-8809-0cfb-b181-184f9d67ad60
 21 168d573c-329d-608e-98e0-31abdfa30a0b
 22 b6bdf109-d813-3b95-ac0a-23843e89d682
 23 a804fd61-1d24-0a48-8bc1-ccabb7fcaa97
 24 fa0f12ef-69fa-24be-bd6d-0b04338cf02e
 25 61625ce2-c898-53f4-a5a6-95c283840629
 26 69772fb6-abe9-24fe-b7d6-81e35d0cfe14
 27 2dbb9650-7919-04bb-ba37-39f6f6cf613d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 204350525138024620406302520. Exactly this sequence comes out of new Random(805).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 6 of Run 9 (seed 449,725,219): new Random(449725219), Next(8,64) per post. The RNG predicts N = 27; the post has N = 27 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 19:12–19:12).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results