A858DE45F56D9BC9 archive

201207050211 w2j9u

explained decrypted filler

3DES(name) ECB, 40 GUIDs, seed 515

Metadata

Post ID
w2j9u
Title
201207050211 → 2012-07-05 02:11 on A858's clock
Posted (UTC)
2012-07-05 09:10:01
Timezone
UTC−7 · title 02:11 against posted 09:10 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
40
Filler GUID seed
new Random(515).Next(9) ✓ verified
Run
w2g3v (short)
Draw
2 (assumed: numbered from the first post)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
12 · 6
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: short

From the post to its content

As posted (encrypted)

0F612E00E6244DB0 E5B4127993E3420E A7B8BB88029B7486 C92AACE6CB5B22FB CBA7BB9FFB2EE8DD 5F7C7B74F27EB2B7 7A5E0F90FB5AE4A4 534713A7AF33C605 4BDE05DB4020E4A9 9B21FB3ABB057A09 70B00310D8AC6B83 172060A8FAD3D50A 983B0263269FC946 DD5748F2E6EA5D9E 796E817661CCAB7F 20B5AAAC1DEDEE43 C3A21724EB77DF10 2DAB2BC2D7A9635A 2910BB11B334ACB4 D1A5FD1886ED574D C0646F510D660441 53AA5FC78F712471 7722EE1590FAB222 30D3873110AC1E86 950E9E10BB846216 ACF4EEE8FAFECCB3 E8F639855E9E1857 97552B000BA36BD2 B100BE24FB102FD8 42B6383AC563DFE7 9E471E4EF0138611 829A7209C903DFDF 9105A53D859A61BB C5402A8359ED6452 0AF848CF37CE2ADB 6C3A3E13372F9B19 B804810D67037CD1 503C845EAF821E2B 18E1F6359DD88305 D021D8ADDE8822A4 AA90E30C5F6C0DA3 EFC92669415A5B2D A958336675357E54 83F25C6BFA33EFF6 0787568FF8F37B69 8B4D7894E55C9A7B A030BF625B626960 C4D357DACAA40CB9 4E45A873E6157B78 56D52FCC9F82D46E 5DB6F341E667E6E2 4B63E388EB297685 59597028FE4E0B7D FB0B8D251CE4C562 675C3EFB3BDFB494 CFB756DF4C49DB5C 83F8B23FE80902FD D2124074C7594707 4EBE2465F44F1762 278D7DD060994C23 BA75559FAD274CC6 F091D90998DC4145 40AE6877CC98A418 51B5596AA99F5905 5B98D8346DDA512E 97DC3C4E688A04E2 B3F99256EDFE3854 0E0F67B3F8AE783C E580F17824ABD5C6 A429D9035EBFC5DE 176C9702553BD581 2723E19376F1A253 C26818FD52991687 013FBEE9E18CEBD0 3928CA945C20537F BC379FB777B6FD4D CE1F05B0D9154D7C 4E5ACB4B8AB05A80 E866EA545FBB28A5 4F39D1B745F45007 F1BC9773E763243A 3BE85F46B24147CD 605CDD051641402E E0F510E5F764C4C6 374A63462C88762D A8C44EACAC932037 F52DD58E561B6D2D C1B9EA224F5E981B F7AED6F7CD0697D2 77ADCE8A06E6FF4A AF56446700EBCA01 1BF5F1BD68508310 14369CA73EBE251B 6B5AAB1529A3CA04 FBB045CB53DE5116 E412FC86D8CF4E73 A2114B84D817266D 042FEAE9A4423FB9 3E7836619A76FD19 9CBD6CC0D73727DD 1A5EB9CF2AA117E0 883CDA2537834AB6 D06A2F903B3C3458 D3B7189D2D6D46FB EC03902A0C7C9A4F BC32A8B323B44F5E 4153834A4822EBF1 6D14A804A94DEFD7 24E61492C33A9A29 E59B239054094BCB 18C218614C9F3124 31F9EA0C7E1B4306 7BD874A5720459E8 6020D9669072869D 2DDE5A3E765572A9 9F958AC17591ACFE 07DC2E42A5D4C00C 7F7C9E4B687B665E 25D0EA301F5A98FB 4A28006280899FDA 3746276AF5F926A5 19FBB4622EC81099 4CCF42FD410FD38A 2C35CF2BB7A963B5 BE7CF401CE317B5B E7752C07E2C19BC0 FA097BEF2E244E41 686DC3667E71230E D3040567CF9314CA 982D4AB248BFCDD0 860666D2BC023982 7B64A5EBBA9A9884 9DEB86F3C7EA9C53 380531F83BDC606A 428215784EBC07B4 174E0484052CB376 DC5AA7EFB7E5F77E 610457EB04CDA24E C1B3DB8AC4EFAAD1 BC8132599A4E4DCB 39FCFF0612606264 5DC33174A7417C79 536AE24D101FB007 5BBC96BD07B5A890 DB0D4E233C0A8CF7 C7ABC934764DBB0E 260402EB6C315914 7147879E4AFAF528 47B21C98819DD3A2 15362DB0E6CE902C BDF2E55C33334DFB 569237F89EAC2C85 73919F8DCB68529D 29A8A8C51E04AEFC 2589AE350B49BF32 112D6E5E05FE4A02 E26AE8B49227053D 81312B9E51614927 731339FC67D5AB88 8717F1AB913C05B4 5DACFFBA8FF64DBD
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 59df4216-ccbc-6d47-98c1-6a2e0540854f
  2 57f3ebaf-4bc4-8cf4-ae3c-a73c5aafa3e6
  3 ce8745ac-5f17-6510-afc0-c3602ff38520
  4 67f4429f-8836-47e1-95bd-53dcb386d56a
  5 2ec5c5fd-414f-61d9-94c4-3abbdb090287
  6 b83915a2-1561-5e90-8e1a-d0f94a96b3d0
  7 7f0ecdb9-08f6-5f44-83ad-30d482912b89
  8 4cb2b746-0b51-78ef-8e41-f95ddf36647a
  9 161c7220-68bc-66c1-a915-e2cf6b22253c
 10 48b45228-84d7-1500-be66-febef9433e97
 11 637b0515-1219-6814-a55d-cdb4515bf689
 12 8035a30c-2b25-4130-99a8-fb4298c4dceb
 13 6dbd124b-33ad-6882-ad80-de5147091648
 14 b7f2eacf-8dd4-3cdf-8eae-1432d44aa36d
 15 94cb4d93-61e5-479d-a2e8-34c3fb010b59
 16 7272520a-0b58-56b6-8d8e-da6f34b79d38
 17 2257d621-4c9c-3a49-8086-80f8a0c78336
 18 3eced4db-da2f-2a28-b1bf-69cde67ffcc9
 19 02585f11-db5b-5bdd-887c-5549898974fb
 20 ebea92e2-395f-6d21-985f-54bded3efb43
 21 ed0a867f-3cbb-2f7c-a2bd-4d808b3bbe98
 22 2bd2084e-5902-1588-8325-89350408c529
 23 ab444fc0-3dc7-0788-844a-e11a8c992d9d
 24 a5560a69-b207-8bdc-bacd-c00a95cb73c0
 25 f80766c1-8afd-1232-a345-4a2659cb730e
 26 0e441864-6217-643e-8657-b856316c43a0
 27 f8010901-ccc2-64db-8a7d-7360428d8f5f
 28 ca9881a7-518c-7590-bbc3-e6271cddcafd
 29 46b98a1e-7e8c-7736-8482-0da28810c739
 30 9579d082-82a0-7cbe-8bc5-0c9c904b98a1
 31 1536223a-24b9-2ea6-8733-70ec4aa53c03
 32 77074aab-51d8-011b-80fb-586272372d6b
 33 d76c60b5-75ea-3330-b607-487d0adebea4
 34 6a280160-026c-8e75-975b-2d7301c8c319
 35 122b5830-e295-4977-8c06-d4401ccd0f3e
 36 66b3354c-9adf-06b1-bb74-ddc8398b5806
 37 e6535946-218a-5a3a-bb97-044416c20472
 38 67105081-2ac8-3958-98df-faa29032ada7
 39 c4de2295-2f52-495f-8f03-76c1b6adb735
 40 47e3d4b8-47cb-3d54-8a27-cb832b723074

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6864655761646345325621081667772038405343. Exactly this sequence comes out of new Random(515).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. Grouped in w2g3v: 4 hourly posts before runs 11/12; undecided: candidate seeds 70,597,546 / 2,764,093 on a new boot after run 10 stopped, 2 hits vs 0.51 expected; run 10 boot excluded
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results