A858DE45F56D9BC9 archive

201207022035 vybir

explained decrypted filler

3DES(name) ECB, 35 GUIDs, seed 734

Metadata

Post ID
vybir
Title
201207022035 → 2012-07-02 20:35 on A858's clock
Posted (UTC)
2012-07-03 00:33:39
Timezone
UTC−4 · title 20:35 against posted 00:33 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,256 hex characters · 1,128 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
35
Filler GUID seed
new Random(734).Next(9) ✓ verified
Run
Run 10 (seed 38,548,093) (seed)
Draw
3 · predicted N = 35 ✓
Machine boot
2012-07-02 09:51–10:51 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

1F5A94D630C8859F 179ED49AC71BFC92 3F9894B37D262B8E 6372C3EEEB5D589B E1B0304AB2C5B7DA F7E5D0C1DE179EC1 EF3B7C30A12116A3 D1E71C495F7BEAD8 87A1EAC708087986 B4CE3D4656512219 A18840D2D76B5FC8 A1BEFABE51A22216 70AFE1ECD835E667 52BD67CA1B4E5443 1D3604EC218488A9 EA0C597E3510EE62 A7664EEDC9C6D69B 7C02D7DAC4C4DBFD 4D39954109CA662B 890BD9EAAFCC3753 4D01D7EDD5761D8A 8456EF156F6AD12C 75D6A76B2E9E4C47 6C5AD95B3B0D4DB0 4B735500B9E23B71 66872A3D25EBAB5D FDB227F07D494992 EBF30D9BCCBC30D3 78F55227C720729C 244AAEC24121C8F8 B8CD19A8FAF26B46 74F396EB86EF8083 03368293BCA5EB8D 2D60CC5DEF1E83D5 B4C6B374A6569927 7C7B7D90714DF7E5 D129DD82CBFAED36 4A1816B1C46D8731 6C04E92333A63855 442840A72DD4D3D5 9F94796E7EDF64B5 196D2F36CF69DBCE DCABE50AA14BDF76 9690614524ECEDFE 1B9DFBDBBD276905 451DF5A49E7E916F CC8287E7594ADA42 F70A0C96CB5465C6 F5DF7CA315C62D47 B2087DB3EEA0F6B7 C573892A6874D92E 8D6A24515E0E5720 38D838EFAE785F51 092400E2BA6C4D43 5CD24C17FF3D97D3 04BA41D7B6766AF1 3F66A6A14BC19D9F 9DEF60D9236AF6EF 3A5C311C8F0BC163 6E65A78038CDE6A7 F72FDCA899E4198C 1C6DE759DA08CFE1 D057C6FC6C6112A3 945729B8A3C2CF83 0269EC95065DB261 383A3C425CED26DA 8E1A945845710A89 CF273578233E61B9 4FBC383CE65043C6 62B6EE2741B662BF 37BEAD8E91F02EF8 70CD62C37F1A6160 F1D6710CB64B091E 32DEAC87D0DBE1E1 E6893B9B07ED58A3 9B186B08C9FB59B5 EBEC1C41B64D6946 77791A3186202AA0 34343CC26312526F 699240561B8A002B ADB42069F24C95CC 0B5482DA136423B9 4A606D30AB311D9E A98713E3F21A3313 066C67CDE153447F B1C1410057835CD1 30C414EEEA3DC541 392488C9E6CE0F2F 75A7DA98E69B7598 7D467B88805FF970 70783632E706F5C7 E9DFA2C35B5EFCC1 0F527843C803BDE1 D9C233569DB7C0C9 7BF76775EF0BA8A3 5D87D3F2F9DEB2A2 813AF35E7888405C 54F9EFD0B8ED1399 C88612C91B296A5E 4EE99323170F98CF 37BDE4D174419529 5CBBEF320BD08C7D 3F4E5E5E34942AAC 3BDB0DCB5CD43372 C1E19FF91AEA91D9 90175E8D86E91CE5 2F2881F29BFAF6E8 392269F1AD020003 78B95B405FBA691A 6308D8ADD1D42DB9 E2E8F34D3AB581B1 C134D1BCEB3BA462 53BF52331016EBDF 3811DB64B54BA9F6 A67A6FFF1468D2D6 2D2D122D61EFC4CB B6EABD612F0CE9D2 698F37283767CD68 2DD36ABAA4EA6D1B 2217A50B73406A29 5DFB7EF5EF416E82 1EE1707601167740 83D75225FC27CF7C 1E3CEAB8E15EA46A 60C72DA161CAD1D1 3F66516D034DF88B A21A007BF090105C 0E19D6968E18B685 E41BDC5FE30BF4A7 1BB7B80EE7B3442C 6529A45172AEE5FE ADB0E160F25F3009 787588D00A9B8CFE 14E503C7CF0E1A60 6E12C38BBAED4FF9 5C0D788A1348F230 B12BA0AA3EC886FA 9236ECE1F9BB2980 EBA5BBA4DD9291F7 25B57A029E3752CE 5DACFFBA8FF64DBD
  • Read the ciphertext. Strip whitespace: 2,256 hex characters = 1,128 bytes = 141 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 35 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9007e737-30b8-1bd4-abda-1637e6345bb7
  2 338678cb-679e-131a-8e92-bdd6168f19ab
  3 84cac942-a35e-7e58-87af-644e198d10dd
  4 b1268813-ed19-2a28-ba02-f4dac617a4e1
  5 55f347c1-0b0f-51bb-b896-beae050a8a85
  6 90f5f39a-ab20-8a83-b27f-5eba97d79d22
  7 72f312b1-f6b3-7264-90b2-f696ee64e55c
  8 1649cf92-c8dc-657e-88e4-48266c72ad6e
  9 01d4c3b1-1fa6-78cb-8980-f20ce30b03cb
 10 2fa577b9-164a-8765-aef2-54002f15bbe0
 11 3342ffcb-e90f-0dcd-b21e-4b2c78e5a5aa
 12 fda5372c-2586-4843-a950-91d4007889a3
 13 53eb1cb4-3b09-17e0-8880-3e100f2eba7a
 14 c2ab268a-a5ba-38fb-a954-c91f28870a7f
 15 b45287a5-6d2c-6a9f-af4b-a140b581b886
 16 6fb31664-a15c-3556-b613-5afbf2b67997
 17 99738225-d93e-3751-86eb-faa49fc96491
 18 3520fb01-8684-070e-bd63-5e7e1ddc388d
 19 25804121-d9c5-46b2-a65f-8617ae42757f
 20 d5e24fcc-a489-43ae-8488-77fbfb37bc2c
 21 b400cdd3-7779-3252-8aa0-57ea2a8c3876
 22 0d6f2c92-d9fa-805d-b243-1baa79371f1b
 23 017ab11d-9d37-0b4c-ba9d-61ac197d5a00
 24 8b8c4639-3178-4a9b-ba1a-628eeff63387
 25 4d91b33b-4931-5645-ad93-0cbe53f50df2
 26 b01c4047-db59-5c32-bb4a-f84b924d90ad
 27 2a0c02bf-e258-00ad-b075-10b324d24e2d
 28 efa46e3f-94c0-4bc4-b2dd-15c6b9e1a032
 29 47f3c048-5fb9-253c-a75b-6941e49f04fb
 30 acadb598-0543-1323-a341-98bb36909397
 31 6980a9fd-bb46-1517-8e02-cef4d2fc5a81
 32 cc3e9eca-b40a-72f5-a6ff-1cb415d7617c
 33 111fa848-8f33-4855-93b5-9f4d36466a6b
 34 70c04a17-cdf0-3fe7-8eb5-b7adf6f70b7d
 35 5111e877-1aec-8e6c-92d6-81cbb8134e70

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 11725876780413633044380455042117438. Exactly this sequence comes out of new Random(734).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 3 of Run 10 (seed 38,548,093): new Random(38548093), Next(8,64) per post. The RNG predicts N = 35; the post has N = 35 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-02 09:51–10:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results