A858DE45F56D9BC9 archive

201207030435 vyyjh

explained decrypted filler

3DES(name) ECB, 36 GUIDs, seed 125

Metadata

Post ID
vyyjh
Title
201207030435 → 2012-07-03 04:35 on A858's clock
Posted (UTC)
2012-07-03 08:33:46
Timezone
UTC−4 · title 04:35 against posted 08:33 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
36
Filler GUID seed
new Random(125).Next(9) ✓ verified
Run
Run 10 (seed 38,548,093) (seed)
Draw
11 · predicted N = 36 ✓
Machine boot
2012-07-02 09:51–10:51 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

D734462B65434B9F EF790E8A56FE4AF9 E8D474FF8D9F22A7 68E131E89E98918C 00CD1EAB0AE791F6 03E8E9FB647135AF D851CC92BD9E184B 05A7C86BA3A4ECAB 0E00013A95A788BF 25ED10E0A934E0A9 B7A683D4BB7D1D1F 0681BC6F3D287762 728618C329B9EBB6 A56723908D80E32F 2A128EB43A1E269A B014B5186E896DB9 69514EBD6458EF9B 2AF8ED5983B3B988 AE39E3F3AF0D988F 462D38D8A4FC144B 096BBBECFCC8CB46 580298205EDE1A0D 5F3EA4C6CDF2AEF7 064B45D4B09FBBC9 FF54FCC42B9141C0 18F69C36E0CEE5B0 F9D21BD8381BB61B 276B49AFEE416EA4 E57D98656B398A65 8CAE040B23B1FB08 48FFD1B901CE9E56 8B5988D558F3C391 C07CFCF11962C134 713E91764FA4672D 3070DC2D9E1E00F4 F26383B4F4CAAC67 535AAF8A1F0AFDB7 3259AAD88892D3A7 0C4C4CD8B447D082 CF7E7A037DB61CA9 BC02612C30C8B2FD 7FA9C5E2FA5E71FD 3B8C5D1A1092FDBC D90570CABC445834 0F67A1D78AA7AE7B 1345A4305CDC96AD 69807E6A762D0197 95EEE359E97AC292 C8C67634E93E9DF3 312F0198A4333950 4B11D8647A554356 1B4B1EDE27115B94 3A27DCA94DD8743F C2F08C9F92BC27C8 8BFFC9A7292DE07F 46D667CE5F2BDBEC E6C45DC538488935 6539644BDCA6C614 A10B8602096A6869 136C9E1B486E9173 C81C821BFFED9170 F9850FC7752FFFD2 00DC24C36E7520C3 B9F9AC809DD01B5C 2F30CCC8E5047976 D8D3435C0E14B37C 3523B5E22BDA500E C5945373D9FFD243 785BA0393F202112 54CE095E1033C3D6 5239BE8390337442 2F165EEB9AD5AFF3 202A99F81A094E7C 841ACA5DC1DA25D4 93BF4DEC19269F14 24AC66BFAC76B6BB 714D9FA3E222BA16 58DD42E5F6950A79 EEB3B712F9FE22B8 657FF6CA9D63313F B5E6B08A64C78609 25764204CB548284 8EFB8A7B924DED1F 75B5075CDC8A1BB9 A982F2D496A25A65 E2238D7362DB21DF 020F1F274506C0B3 1D7F2FF983FD75A1 DC2FEA9A2A848CDB C57D4920473576D5 C4F26AF38FB461C8 12590B7634724541 58CE036D52AC73FD E2E8EC7A78F42916 07DB351395AF1176 3A22BF85D810E492 0D0EAAD4A6C6717C 7AB4E330421CD185 27706E8CBF158572 496E9173A28959A2 C228ABD4C89EE5DB B0EF9E23D95469FF 851D7C8ADB00B35A 08E4798C759A8A6D 369DF04928B731AE 450BD21821EEDD8B 8FD7FCD08D9B3DB1 53A89FB928184319 A00A67F87E38F2D7 089879F41052E57C 78A9DBB91350D8CE AB8C9C9720241096 957B8466D29CC67A D29B003640430CC6 972E3AB17324D81A 4796E6C3A2DC4E6B AAD263CC7E8DBA02 BB3D07DB5CC66004 758AA54F5CB340DA C1B263595CD788EA 4B55E0E0F6CB7D4B 4CE7D682B72A4408 5B80E885AC0802F3 3BC5BE6D8306B54D 7B52B5E4162D6F3E B651BCE64A926038 99F36D6E1C4B6263 4F9909B3CDAC48D4 4F7F1E6F12713224 F0EDE081A68E4908 DC05FD64FC2D231C EF51AF529C0F70EA 8E34CAD141F3A74E A3B1DD0ECA32F3A4 BB48B174DB714697 5DC8A4B362DD5E27 42D680A5BCC47B06 1B6FEBDF52502379 83512239721625DB 9CD44E5B662A53DD 8AD3783010972A46 BD90673F6A516ACF 9F2573631C43C2CA C6EA2EB3BB86F02E 5DACFFBA8FF64DBD
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 45814242-304b-0d9f-a651-5d1a0ab1bcd0
  2 d28faa8a-b94d-41ab-8f16-d781a6cf020d
  3 a0237508-1150-15ff-9284-6f498223ab62
  4 eab2945f-76b1-2a15-bcf7-8eaef152135c
  5 4c6138a4-8d6e-538c-947f-beb74d4aba5c
  6 c04aee23-3d17-75bf-889c-9b4380cfa2c6
  7 685c5d1e-8875-8054-8acb-36883eb46072
  8 a1f899c8-9894-1e0a-a532-090d9daee934
  9 b5ac6714-804a-33f5-b18a-02be121ee630
 10 ae69f476-9a2c-3ab1-be92-cce3738b5c4e
 11 94e5e5b2-fd37-35b2-8e4e-62597125fb21
 12 b4abdde1-6250-0d2e-93b2-9a79d50225ef
 13 98eaec1a-497a-596a-8409-08ad164ea266
 14 296feb63-0a77-4b24-aa55-61f0be80df71
 15 0b96df26-158c-49bd-955f-fffe57b740e1
 16 ed635b89-a05c-00b9-9785-4438ada6f7aa
 17 472f2b90-4a11-38eb-9abf-9e9b2c4adca1
 18 4105edfc-b0c4-413c-96c4-593f8bd1d4f0
 19 44b05439-2e3f-0955-89ca-75b02c1d08c1
 20 cfcb5a49-6f08-63c1-9623-95c0025e6085
 21 e76c3a8d-f42e-31a7-9c91-2e514ff641ee
 22 e7649916-3f0e-4f64-b6e6-77db78fef371
 23 d083af68-3593-17e7-b53a-b4555ba9398e
 24 68b73532-df30-63a8-beb3-6b1e6c5ca995
 25 201aa566-06c4-8ec5-bbcc-91d1879f6f1d
 26 3e85e8b5-75ec-8019-99e6-212221452086
 27 eabbb651-5897-3659-8c7f-ab7f245c5bc2
 28 e6d05dd8-d537-1780-97c9-8e9edbb668ad
 29 a2f8dbf5-1126-050e-a4ea-fd18af44d8e7
 30 b1f4a47b-149c-6a47-975d-4a0a980f0cff
 31 9be571d0-d7c5-3e8d-8ac1-82a71b91eded
 32 f18e3560-8a87-3cf5-8ad1-dbc2bfe74e74
 33 f4ab4a84-a504-5ef5-a2dc-fb9f24a19e0b
 34 57a87452-791b-1fef-a21f-4ec5b11b4485
 35 fa24e0c9-c1ae-2095-ab65-7d9f8eaf3003
 36 d72c588e-05ad-134c-9fa1-163464927340

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 041257813330544034063416883106335121. Exactly this sequence comes out of new Random(125).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 11 of Run 10 (seed 38,548,093): new Random(38548093), Next(8,64) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-02 09:51–10:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results