A858DE45F56D9BC9 archive

201206290024 vsb4y

explained decrypted filler

3DES(name) ECB, 25 GUIDs, seed 269

Metadata

Post ID
vsb4y
Title
201206290024 → 2012-06-29 00:24 on A858's clock
Posted (UTC)
2012-06-29 07:22:45
Timezone
UTC−7 · title 00:24 against posted 07:22 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,616 hex characters · 808 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
25
Filler GUID seed
new Random(269).Next(9) ✓ verified
Run
Run 9 (seed 449,725,219) (seed)
Draw
10 · predicted N = 25 ✓
Machine boot
F 2012-05-15 19:12–19:12 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

3663D84CAEEAE08B 467206D636748650 5F5C0DEE6103B2A4 A483B89E79D41293 6592127CDC342879 326C1B0DE203EFD7 2D290477136ACD97 FB187541E2FD9AB0 81BF4C3E70FFA317 B0C3A2F00887E4F7 F849AA5FCA60ECEA 9D3C2FCEDA58D37C 5F75EDDE93C1FB14 DDC3B100A92C428A F0C1AE9175BBC538 245EFCD1ADD3E0EB 4D8681D3C3BA217D 1A17512B9E4ACD56 FC78E86720504663 167C6AF94B3F3155 A5671685A3AD0E57 BA5A02FA4F4D35EB 1C2FF988420CCBD3 9D593F8560A55404 1519B711D0B2CE07 CB305C2CA3E5DB0C 611503F2D932EA8D 7C214F18943CA71F 67D4A3BC81682B65 5423AF7FABA56334 09B251BE08AAB5F7 DC726C1912BC2BA1 E9D00A40D804007A 6E50CA88D35B10E4 F1A95CA4A3343C7A D9076DF235B701AC 1C40983AA6592C8A B9C8C5895FC9D924 22152B26530CCB06 6270E975542B0841 0E8C80CE7BA1C2EE A8A5DDEBF40B0B65 48B3CCBE95A27F81 D23995E0160AAD84 9DA0E7A384F77A6F 4F96CB4EC6EC32A1 3875CB55951DC27D F90A59CD61BD79D3 C3C0C503CBC5E2B6 58421BC14EB13C4C 61DD09CBABAABBD8 910E77542A4EF004 58A9BAA926409CE9 9DEAE977D59E3C36 A4EDA7446A933172 D10380F65C2230CD 7C76019C39B4E99D 60E1BF6C8C5872B7 6E6156C783499D6F 7B460F4A224B5A5A F3FFD1EB0B4CB9D7 D247CBCA64E6AF04 376AC78AD1FC3FB7 2A2195A0E91C5FC2 01A91DEE9774C0CE 7803879CC649E6F8 3F649B2ADEAB17EE 2671EE595D2C50FF C680A2B2FC84F317 552A15A6E2768EA6 968ACE634255FB51 D849BE456B311AC3 46258DDB21624B21 55EA8BC0E65CE550 4DC699F7E89D53F9 85EC7DF60783FE09 958C7F0DCC521940 450F20814E1AA1C9 537879D6262B465A 741B206DFB303552 AAB3290D90830A61 65FFF7AC9B3474AD 47708D88788B7522 5DF8359A265BB25A EBCBAA0FC7CE6841 7EA6E0CC3C432BDA 741A7B347F19898D F530CCAD65725954 7BF192E8AD030AC0 ADE96DC5DC4E34AB 246E5DC6B2F65D61 79CFC76DDA5E94DC 0EAFA38C3E8C775A 90AF1F76B1289837 D83E606C072B7D6F 8EB20A4C582BEF94 8DB4794E6B714874 552B6D071BD14ABD D3DFF1BF907E4F22 868357AF15EE45BC 5DACFFBA8FF64DBD
  • Read the ciphertext. Strip whitespace: 1,616 hex characters = 808 bytes = 101 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 25 GUIDs as hex (shown below).

Decrypted: GUID list

  1 81e7f15a-01e5-21cc-9115-eab4c08a23e6
  2 5c5cb5c7-3f87-6cb9-9d51-d851e78acfad
  3 b7f9a2aa-003c-7133-9c3b-2b26acfce04c
  4 db6ae2be-203a-864c-964d-be92f3e70e30
  5 90df91d6-16b9-5ccc-9860-d240fa5d3d00
  6 cbd58360-cc07-52f0-8a60-dd77f764fc90
  7 86220175-ce9f-37c6-98cc-32392296aea9
  8 c3fd383f-586b-36aa-942d-70e9e60aa9d8
  9 ba76b432-512b-2b5f-a92c-86e7b0305c18
 10 7a725f56-5b41-4871-afeb-497f260cc4e6
 11 394303dc-da3b-442a-82eb-8e6cd4eca401
 12 4788d0a8-dcbc-4a97-805c-77c0a01f4f73
 13 4de10a24-e5bd-53e0-a228-eaea1fd3e07a
 14 c7aeea9c-7597-30ce-9f3d-f469764733e5
 15 da74f69c-5ebe-20e1-8405-3979927df619
 16 d1ec48f6-69e4-037a-bcdc-a72e3ac15684
 17 79dacd94-e38f-838e-9c2f-ed04c85f50d9
 18 e3aa70ce-9a32-6762-94b2-ab44a9f5ed27
 19 e00b843d-c8f2-8f15-90b1-c1d283967f34
 20 483cfb8e-6f57-4dd9-89ad-769085626280
 21 b029da62-637c-5c9f-89b8-51a6e32b72fd
 22 dc3485b1-a697-7b37-aecb-55eea2a25709
 23 3a21eda1-9947-4dac-8d90-782591982960
 24 5882756c-ce6c-00af-83de-7183237050d8
 25 8b5c619f-c809-0d79-8672-2702b0105fac

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2678553324445320868457400. Exactly this sequence comes out of new Random(269).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 10 of Run 9 (seed 449,725,219): new Random(449725219), Next(8,64) per post. The RNG predicts N = 25; the post has N = 25 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 19:12–19:12).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results