A858DE45F56D9BC9 archive

201206290024 vsb69

explained decrypted filler

3DES(name) ECB, 24 GUIDs, seed 427

Metadata

Post ID
vsb69
Title
201206290024 → 2012-06-29 00:24 on A858's clock
Posted (UTC)
2012-06-29 07:23:29
Timezone
UTC−7 · title 00:24 against posted 07:23 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,552 hex characters · 776 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
24
Filler GUID seed
new Random(427).Next(9) ✓ verified
Run
Run 9 (seed 449,725,219) (seed)
Draw
22 · predicted N = 24 ✓
Machine boot
F 2012-05-15 19:12–19:12 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

8763709F87B95950 C6512D0DD4015EC3 23D4FB8BACAA0C59 AF46AA6A2FA898C5 2E8DFE3BDA5966D1 D820DCC704D373F3 6DA943A6142399DA D2CA5188EB53EB18 5497D2A2D64E5590 7B8ED32E246F7CEF DDAB8F8EB930353B 72B233E3813A8D25 46224C2ED1170D3F B1FF1559C54AF8B7 104EF49DD1D9AFA6 1DDF9B88C59C9679 A7098367D67D1185 2763CB2EDD58AEF7 433ED2C5783920BF DD6386BE0D18DBE2 360BBB9AE2DC56A1 1F4D81FA4400BC04 75935D97211136FD D560A255C367DD35 DB4B88956871BC07 846C33E5F112CAEE 0F1877D0DC6DBD27 4EBBBC2AD4C1DE8D 1371A05CF4C90438 C95BBCDB39EA08A5 4644605C90D45DF4 DE5E9110F955D0A4 E6267A321A72F07D 19B988BBCE7CA5B0 FCF89BEF7B6CBBF7 885676905C092461 CDDAD3A18A640CC2 FEE0EDF63C74C8F0 A78032C470B1C7C9 A7D59508DEA19818 C881A816706E4E0E B8C0213BE74F8EAE EAA73784015E0A89 A283592C857D12D1 8D4495A0B7644BEB 80977DD85EADB5D2 76F93FE69956E96F 5B2F98D277C5568E 9DADB8044C01849D F7AFDA854CD1F555 BE7213AC3C4A9E26 F64D7CD1B3CBAAF8 CD6C7946317A14E8 14C91684949132A2 F6A1CFE33F25D104 97E391712676CEAA 73E5B0D960495F58 868F9118B145666F B95AB16A067C6997 42069E411F459E2B F4B44DA30ADEF170 C75CC3AE90E7F958 AD169960556F4DEB FED336551B6E262D BC2A7949CD7071C2 76258A3F8BC443A7 B99EE5A00AC07CEF 6A6DBA1BE5652965 13120CEE22E4EE52 F72204A5C51EF75F B90267CA5DA0BCAF 3F32D1198457835D AAF96DADE69716BA E2C7BFACA01DCAEA 6B0C970D15E541B8 2C7F6E215515208D 72982D51E02AF073 BD82AB8E7E76B190 E028E6EEA7004CC1 76CE98D7191938EE D585CDFE0FEFB9B1 5B988086F87324C4 5E00A1F759981D52 89D8501D67FB4AE9 7E5AECE9F36E28B3 C3503A7034FDDBE9 06101EBE8B4FCF48 9955C7A09D76D114 3B13919F1E3E1263 D7297F283A408A6E 4F2F7FBB41FF6B2B 77322B530849C9C1 785E94AEC69646EC 6E80A98FE15DCD77 AAA6504CB46FE429 E2CD72C8B1315ED2 5DACFFBA8FF64DBD
  • Read the ciphertext. Strip whitespace: 1,552 hex characters = 776 bytes = 97 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 24 GUIDs as hex (shown below).

Decrypted: GUID list

  1 18cadfc5-4709-70cc-8250-d575d6d4a24e
  2 cebc067c-85da-05c7-b4cf-01a1636836d0
  3 0fe56688-0641-2c27-b160-7e13416822a7
  4 0f0d900a-53aa-6d44-92b0-f51337ca0017
  5 e71984db-3929-81f8-bae1-48dba2eceb6b
  6 012ffdb3-448a-68f5-8260-ed8cbb842efd
  7 51759b6e-463e-2167-abf7-3f9fced141e8
  8 6a4c8d4d-5b26-5712-b596-121196ad1704
  9 0a48db72-3d79-7f0a-9c62-17a5ae4d70eb
 10 5b0564d3-5dc7-6dbe-953a-e3abbd7862d4
 11 2ed9a021-b0e9-79f2-a94a-13dd842b95c0
 12 330bb3e1-03a5-78e8-b4d5-a0f335edf5ff
 13 5454153d-4bdf-140c-b914-f4343e0ad1d8
 14 fee63217-2663-512f-ba27-f5b7d25d3608
 15 69bc86c9-332c-763e-aef5-933fb35d6ba2
 16 845e8dd4-43cf-6b4e-bd59-b571e0796b55
 17 5f1dbb4f-1019-33c0-969e-c3914b4c69bc
 18 629ef9cc-8777-6a0e-b376-a60493d9ffed
 19 a5f4f842-3568-271a-8ee7-0c8856094f75
 20 e9295b0b-e422-5bef-819b-0d0ff4f62036
 21 ce62f20c-38a7-4fb6-af8a-db8eceede417
 22 ef33bf9b-6dbc-5a30-aebc-9e700dde4b42
 23 dcdc17b2-5081-14db-a6c3-40c418a56c94
 24 bb77c73b-c5f8-18e2-9ef2-f78e402b1aef

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 702686257677157636254511. Exactly this sequence comes out of new Random(427).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 22 of Run 9 (seed 449,725,219): new Random(449725219), Next(8,64) per post. The RNG predicts N = 24; the post has N = 24 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 19:12–19:12).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results