A858DE45F56D9BC9 archive

201207022235 vyib8

explained decrypted filler

3DES(name) ECB, 35 GUIDs, seed 296

Metadata

Post ID
vyib8
Title
201207022235 → 2012-07-02 22:35 on A858's clock
Posted (UTC)
2012-07-03 02:33:40
Timezone
UTC−4 · title 22:35 against posted 02:33 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,256 hex characters · 1,128 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
35
Filler GUID seed
new Random(296).Next(9) ✓ verified
Run
Run 10 (seed 38,548,093) (seed)
Draw
5 · predicted N = 35 ✓
Machine boot
2012-07-02 09:51–10:51 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

C5773AF3AA9FFA80 72A66CF5B5E6010F 5BBAE6D6DDD722CA 8E0CE574ACB3143A DCB03A715FFD8DC9 CAA7005FF928B76B A7592CE2C9320550 8A8BE394966E5910 80E45739785BBDE3 B9097A7139176467 EED1951998B16FB7 943A6900A9D60A22 865EC922DEC5A1A9 78542D780CD5336B EF94ECD234F0C44C EE9ABCF973754E82 96D36F4E891FC7CF D674D49BC2224D77 7CB00E3F338E6F65 4268FB9AC9053722 DBF7AC617E938B46 A16C42ABD41EBE5C 920EB2A377BDBA90 523AC2AEDE6CC313 79A4F5B0E6B5397F B27602FB00FAB7DA C33A737A38197F11 A34CF9CCCC1858AA 03FF4618ABF0F288 FA50EEB1F6214F24 6010B13E24E7D4EA 10AB694DBA2BB523 A6F7E12BC83C9275 1F0A9354FDD7B2DE 3E1809BF3A4E844E 8B70689E1F39BC30 74FB1C6EC2B35345 3B60547104FFA631 65F2A79CFF677B7F 62B073265495D730 032A624B79950542 D8CF66E8AD9B548C C67921A813B04D10 2523104446BD9F6B 556F2D00BBD59EA2 00AD91DCEA4DB3C2 07BAD08F9BBAFAB8 0F53FECE5F56DA6D 1CC67729AA77E4CD EA911E769B6A0FEB CE7C1D7868DE104C 7CC404FED55512AC 7C5ADA4358EC58EB AD10FA3E03F9CB9F 1F216E9000CAF351 915E6A32765D358C BEB861FC33E18444 A16654529DE0206D 563897306BA48483 F4F0E979AF0117B2 6B17AEAD8447C484 7CD4D2D1299B570E 25487EE46650D531 5A3F7700E0178BA8 929FDFF2196BDA87 EC67B5D5E6D13049 780C2C07B4913D83 A9F433989115E579 39893C2E7390E14F 125176102D050089 B5C128F9DA136949 36087CE179FF7ADA 2FE421C09850A4FE B0321C6E7B875D57 182C2021A270E1C8 2827C30D5361A64C 350F49D4C6893794 20DD45804CBE49C4 6FE53BA6AFF09EA5 091DD5E58BC003CD 46370C65ECE6B112 3FA92B103759337F 8DA06B2F4AE93299 5735FD532DA4E43A E4D52F2EA4657EC9 1B2CA8E84C422306 A6E7683314B02174 9387B659EE7836C9 420B63FD09E3873C 6F7928AF464C3B62 E84CBAADE3C7751B DE0D6EF114FC13FA 906A059BF6569C6B D301BAC53EB5C3AB D7763C833F40218A 9D146DAD620B6EB1 704B2B72804DB9E5 00F264D9985745E4 2EE6284E2C502C6E A634E1E89C443410 D3D5977DD7603E45 C373429ED0933F90 561070C5581AF57F 13607494AD2A942D 2EB91ED46A3A1825 4395C8B8E82DB771 CE42DA2878137CCE A5F2D8B2C92D6BE3 9BD46EB58F85E7BF FC9F37A1357F19D1 9D1331C932A52EEC DAF1F0B4A5D2B1B2 E240111726762C98 94BE5FCFAC424C25 629E9A12FA6A5701 371A3ACE8F35FAC3 0277883CD336762E C88D88809865CE56 FB211710554823B6 94D1AD1A012EF6C8 202024848FC20F88 4ABC0BAD5DE8ABD6 C51D4B8212758A9D 6AB18E0C7ABBCFB2 0B2B5C67922C862B 15D718909ED2B6A1 D0B147C8A078DFA8 B84DCE74D1CA8591 BFD27A81C9F017CF 6DC70D1752AAED44 A72BEA306FAAC4B5 A8D1ECC5D33B54D6 FF4C649A5A61654D C8883C1C6E4A8681 61C4E65A114EB2AD 0DF197B8EC370938 5202421F36CA5714 A2586E0DBA43E3D4 25C99BD0A77B3F07 EA91762FD3621EF6 5DACFFBA8FF64DBD
  • Read the ciphertext. Strip whitespace: 2,256 hex characters = 1,128 bytes = 141 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 35 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5148fe22-0bf9-3604-959a-da397f8c3344
  2 4714711b-c3a9-63b3-937f-239d76816617
  3 e4ef8c2a-f2e0-6729-8cc5-cb4d5211c05e
  4 351fd62b-0c21-6a63-8412-296a2f56e582
  5 3fdb88e7-17a8-763c-a86f-ad3dcabf079d
  6 236f09c1-cba1-2ca8-87e6-eb4ab394975a
  7 ba5eb89b-6338-4452-9f1a-2db48539d7e2
  8 032edae8-4460-8581-9b9b-baf9b6300e01
  9 c88ea856-5d08-5fd6-a523-06c3b855454b
 10 b54efdd6-48b8-3f00-ac20-48bf26a7785a
 11 6ba4c45a-9b13-3cad-ac03-54708a6ceac3
 12 e10187c3-5065-585e-ba32-fb3cd19714e0
 13 06105235-285e-1726-b027-f7dfe4b9c11a
 14 df1198e8-ee69-45cf-963d-a23dd01599b6
 15 64f2b3c9-1b1d-19c0-a87e-9382c945d5f2
 16 7da82a83-b2bf-7bde-b100-c62d6dd7403e
 17 97cb3c95-6e5e-2606-aed7-bcae6e0a023b
 18 367c97dd-1eb0-4f00-941f-a23166ddc2ba
 19 e98ff6cc-6d67-6bb8-be02-c682957ae9c2
 20 ea3aa42c-8998-8f5c-8931-b33ec084ea6b
 21 0478e38c-0cb0-1023-8f22-19492883e276
 22 d9288051-0f58-4080-8149-5c78bf3f5bd1
 23 c81bdafc-3a75-08d7-9aaf-03f6a0353552
 24 9e0c2459-d77a-3365-83c7-c56864fb2815
 25 9d45c4c6-aa89-63b9-a14c-186c6c6c25b2
 26 9ab1d91b-b040-85cd-8a01-ad4e22e01363
 27 75111885-66d8-3fa9-96c5-72e7a2b36171
 28 9eca4c3c-2eaf-0861-81a6-37eb39427350
 29 dcb65750-24e0-2b5e-ba65-dc3c900ff92d
 30 aca0b1a3-9992-449b-bb45-9bf500aeab37
 31 14383839-114f-49a4-bb05-c8315bc394e0
 32 07fa9037-eeaa-3d18-a93d-91a73483feb3
 33 c0a8b44f-7a2f-2f1c-ad6b-cd894649e5f3
 34 db39f5c8-eda9-3343-8f47-ee673c84ec29
 35 c6431166-00e7-83b0-803b-da183b533f9e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 36667248533514172468140368302443238. Exactly this sequence comes out of new Random(296).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 5 of Run 10 (seed 38,548,093): new Random(38548093), Next(8,64) per post. The RNG predicts N = 35; the post has N = 35 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-02 09:51–10:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results