A858DE45F56D9BC9 archive

201207071206 w5umb

explained decrypted filler

3DES(name) ECB, 27 GUIDs, seed 860

Metadata

Post ID
w5umb
Title
201207071206 → 2012-07-07 12:06 on A858's clock
Posted (UTC)
2012-07-07 03:04:13
Timezone
UTC+9 · title 12:06 against posted 03:04 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,744 hex characters · 872 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
27
Filler GUID seed
new Random(860).Next(9) ✓ verified
Run
Run 11 (seed 37,057,156) (seed)
Draw
30 · predicted N = 27 ✓
Machine boot
2012-07-05 09:16–10:46 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

34703AC789B83596 0C16C80F89749FA5 DFFEF3E5F921785B 1EA05251ABBD94B5 2BA20F11AD284726 C39EDF77C3B1AD26 ECC50AFC9F799401 85B8BB811BD90AF6 40A9E247789653A0 222E0565F3458F84 5FB06311B6268E88 CD15CB15F465E3CA 3CC2A0BE74C30AE4 9C1DAFF5C540673B BB9EB454CC2C7513 2DE1A938BBD85DB8 F45D7E596C155B5B 385B5E283677C165 6550746C749637B0 8875C691C6176C58 D107DDF745103C68 7B151F834203A703 CDC5F2CAB647A17C 03925E10B92516EF DC2C5B2A2CE6D5D9 43893704BAF4DA35 DFA7BA4FB85AFE15 F1C80B6E4E2F7B15 51ACBC667E710A51 9801601C098834F2 178EA8B86F312E31 B2A316C13FAC49FD 92F151C643AA104C 0EE8C4A181A194CA 7DFD221ED4196C3B 36630938E17595E0 6AB0BE93FB34D6CC 105E941FA723A502 627B183ED6867E0D 2D28665EB3F86C51 ACE0F2FB51008BB8 B73CACCAE2F9BF7B 487260C583B4FA9B 764B09BAA2524F36 62F989098F3B0B7E 8DCADB2B453D5F32 14FFA85DB5BE71B8 76A61303B69AAE84 6D7BEE84A88409D5 63CC941CB2FA29A9 44B4174A89CE4918 F0EFBD1AD607A1C4 A53182C31C0EFDA6 2E99F9E5F007CE52 4B44AAED14394B45 486FB5ED15A1C783 A26FC69995EACA07 8288A1926B2F72D0 DAE9D4FF6252AFCB CC9AB90825D3F8E5 8AA913E67A32E19D 4155895A612854AF C86EC747848481A1 44734CFB7B8EFD2D 32F96F5FBE573C90 D4D77F5D3E81D910 B541CA1D45CD9BAB B4D7BE93986B49D6 7104CC47193B369E C12242062CAC7753 C432DBE6D0AF3280 B8CF885AE38C7A3D 7509FC75D253735C F1AECF25FE4FA06B C895074944731985 D32D1653EC561693 FDE6F7FB558565CE 017810995F088E44 3C265A5DE7AAFC7E BA8F2034768DE97A 957CA60DEA197DEC 5FB9042BB0F9455C 356E404A4E5466FB CCFA0A5E682D8A47 A29F845B83A50FBA 2D5B2E0DFF29F3C6 73C67165D07266DD 1D9DDFE51DC5B51B 6F216410DCA9D541 C29F1B910A014144 E66A3024A95682A3 24B74CAE9F2EC4DD 810C730D03477485 1E40BA6FFF2D0CD6 0039CDE8DDA283C6 5DEC1A12FA6F6AC1 9B9EEC3FE27F8572 C7F0810F1AF46DEE 85A8F5A45CA645EE DDC6C5D2F7B546DE A44081F25EAC3CD0 7EE83AD77E47561F 740A3F2CEC82594D 4708631A80304E3B 01898666B3D65C8A F3657FA308054E58 C692052FB45B5E5A 716AB56D4ABF8D4C 5DACFFBA8FF64DBD
  • Read the ciphertext. Strip whitespace: 1,744 hex characters = 872 bytes = 109 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 27 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ff89bf63-1370-0c56-91f5-2f7799f00363
  2 0cfb356b-c6ca-11f8-8a3f-1fa090dd3369
  3 4c735a7c-5d52-8264-a5ce-dd458a6aabcc
  4 4323569a-3beb-1d6a-b06e-bdd41f6e67be
  5 b4bcbc49-a81c-49ec-a8d0-fd5704e4c2af
  6 e3749452-779b-08b8-b583-1109222379b5
  7 78814e5e-9c26-2cc5-8e71-ea490c331d72
  8 0a1ce376-b2ce-89e4-9fe9-6370c5592d00
  9 6ab68703-4c4e-3c6a-b3d3-ba7721edfac9
 10 23ef48c9-125c-3772-b4d6-57a824ba956f
 11 7ecf12ef-d503-7305-b9bb-d4f72241cc69
 12 b4c2878e-e1e7-7008-bc81-57098902ba49
 13 efefbf5f-96ef-7dda-bdbf-8b59ee7e84dc
 14 46e0703b-4d11-88a7-90e4-a29d515584d0
 15 bbb6e8c5-9874-86a7-96ed-f54e344b2981
 16 5619dd9d-5269-1345-9dc0-0572cb4353d3
 17 6bb964fe-3b79-30f1-87d9-daa8c8afcab3
 18 4c967acf-2aaf-1e06-b409-930df5c399cd
 19 319a8db6-8091-8378-b785-ad7e415c050d
 20 488456d6-13c9-2a7c-9157-bef26911a116
 21 7d0571b4-f87f-00f7-8a30-cdc2294fd3a0
 22 b0205dff-afca-7a60-8516-df9c7fc5acfb
 23 ffbd9783-f884-30b6-827a-4a45f5b7daf0
 24 ea2fdba8-c9dd-4169-8734-9071b396bea9
 25 b115d659-fd4b-8ca0-be46-c69882c67e64
 26 1a508d84-0a5a-5f8d-9118-76c2c1802732
 27 662de0c0-fe75-252d-a393-fe706b8657fb

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 018140283377788131820734852. Exactly this sequence comes out of new Random(860).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 30 of Run 11 (seed 37,057,156): new Random(37057156), Next(8,64) per post. The RNG predicts N = 27; the post has N = 27 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-05 09:16–10:46).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results