A858DE45F56D9BC9 archive

201207200103 wtlvm

explained decrypted filler

3DES(name+name) ECB, 40 GUIDs, seed 733

Metadata

Post ID
wtlvm
Title
201207200103 → 2012-07-20 01:03 on A858's clock
Posted (UTC)
2012-07-19 16:00:50
Timezone
UTC+9 · title 01:03 against posted 16:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
40
Filler GUID seed
new Random(733).Next(9) ✓ verified
Run
Run 16 (seed 39,036,328) (seed)
Draw
15 · predicted N = 40 ✓
Machine boot
2012-07-11 17:05–17:10 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+namerun: seed

From the post to its content

As posted (encrypted)

3F0546C38423A8B7 7FCCBDF553D00B3C B6EDD829D8223D11 26005D35C6F328F1 EBB448898154DFF5 0CE19B321BF4B07F 8397534F7FA2D259 C610C8E1E028C145 09F2511B76E6AD46 96D4334E40E1DEBC E261E8892B578765 3A320B9522E134D3 09CB814A10A12631 3FEC77198232C46D AE123B95869818D8 CA24C59631CB9B39 9BEC398756297ACC AAC97F600147C5DC EA77A24FBA5CFEDC 924233EB4EAA2048 4FC547D773A08D87 066BE9ECCD51E447 5D9805BA4E424226 0950F7A1060A8A9B 1844D1214D3E9E29 05CB1CDEE3A9AF28 5BC4F830337DF04E C1C10E190C8912A4 A71682320B94466A 9C30C4680902BB51 77554C5412FCC01A B4980304D3C055A5 5D146801804ADA9C D5F282446830BC08 7C30B48ACC270AD4 55242B1CDA41020E 060384AAEA317276 82DFB6D2E412EAD6 F18CEBE4D0DDC641 0986283A6C5EDBA6 726FB01DFDD4E006 27452F67643021E1 357C22B8EF0DF840 EBF4B2697ED682E0 F5F14A84B8179B9C 8E2548D807527396 D296D6C63C6017C7 094047C2FC9A2371 81686730BB18C21B A40F78F6B0F8D28F D9DC5BB7C567B588 E3F4F62A8AC430FC F0D50D2B77946F59 553FBB50CFC10255 38765268DE74658A 658DD048F0413EF0 3D2ED7E29F2BF0CA 4E40C26BC54576E2 2A9BEDA0AE9636FD BBA7C3C99EDC5623 320F829A3A6B3A90 B54CFEFAF45AE4CD 99D5C43EC8A5159A 08F63BFBCC354A95 8D9D0BB786D620AA 34C014E01824A8B6 B2A28FAAC50C76A8 1B8AACA58EB14663 EA877058ED49ABC3 E7CC4814AAC3725E F8CAC58C16B60F4B BC25DDCCEDB58A3B 407C241C03609837 D3832AD74D408A5E 605E0AB46A520626 F0835FFAE09E9779 CF3B6B1C962EE845 D8FBC7FA8A03F674 A43AFB3C1FC86096 2F8DE9758443F72E 27A03EAD5C71640E BFA204525279361F F859A58551A37D0C B795DCEACCC8AE04 2F2739BBE4335D89 59B3AEC6AFD503A1 A6D35106DCB839BF BD7E477BDD47894D 95A88AEBC1465709 9E122C1505947138 AF3AB4931076611A F0215386569E4E18 A4B24185A83F4E54 2162FD37CE263D94 4DBD916F71908490 9F7E0E1D0CC2957E FA316EFA759CEC33 7A6E12E45C5C478A 70D5C82BFAF94C70 2C0201013888C1E2 DF18B2F3C9ADF37E B8610E8E2BBF2B56 7DC11769F8E5E678 D661AB3919029856 80A084892D6A62F3 0FC9099432DAB330 8AA1E583ADDAC6EF D2885DFE5762196F D2B8FC912978B4D8 8C1B0F7693402500 A166BCE37CF0398C 911EBDFC4054420A 42A9BE408E66B6C1 F67AA3BF3CC5DF6E 3EADA2161524A7AF 743F45D1F9679BC3 D62C9C469127EDC4 310EE613E4BC0AC4 140F9BE09F7146DF 855F449237C1D451 707E311EBF7EACFD F9EF02E4ADB1421B E9FF28EFA158487A DD222144BD5D8254 348DF867F4C54DD0 68FFD0E9FB9DE19C BE11F6E846D5C39B 011A56662ECC505C 8F162996ED7A8BE2 76374AA44720CB1F 908158FA57D6B30D C83CBE5103142886 833F17188A440764 F60773687ECE3A59 1688989D50AC8768 C58E3A50C6DAB535 22EA66B018B92543 A102A87AF58EA304 1887D2CB628A8CEF E3C6BAEBE3C2984F 6CD13EA5A9B98E9E 3E9E3B6DE97675AC BCCD4B8677A85B75 A1B71B3291BB7487 B88D4AF5AAEE5EEB 8EC0CFB2A3398A2D D2B2000AA5F536A2 F0362432DFBF8F37 0A8A12880389DB2C F6EB80C796BAC8F4 9E950D2E7A590244 BA6456C311BC7CE7 2347C467510B253B 40897C77CD34A6EA D26C27DEAAF82536 211EAE86863273CA D65986289CCCDD84 6B5D621CBD232F4B 695471C50D944CA1 4031B86BBA3B4E95 12ECFFDF2899BD4C
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 809f1ae4-335c-5b56-8e9c-1717ed57ce76
  2 e43a6b67-eb94-812d-9412-d21ecefc0cda
  3 0263a2ca-0e2d-1ff2-ab95-8d5229d8aabc
  4 a9bce6ca-4f6c-0aa1-bc81-1cacf492f9c8
  5 4f53ba42-3d1f-101c-9b0c-7e02a668668c
  6 a65ea62a-eac5-1abd-b0a9-b6e517a15281
  7 e3b37b17-4d49-2ae6-bd92-8cf426a25ceb
  8 789ebe4f-6c8e-1876-9da1-cf7c07b756c8
  9 26a981cb-7392-5c18-b8e5-784df4893eed
 10 85abe65e-1a93-5982-81bf-4ce795bf0b54
 11 6e473d2a-0f37-2c7d-aaca-d19ad0a9c84c
 12 bf1554bb-6d84-6498-967d-cf085dda327b
 13 2d546619-a6b8-400c-bd00-39d0063d3986
 14 2aa415b9-341d-7ca4-967c-699af4541750
 15 bc4b5c5e-418e-05ee-9457-bd268859d050
 16 038579b0-1901-7a8c-a609-236f50e58f68
 17 784f052e-bff8-83ba-8ffb-2c4c47b14ae6
 18 a9200c56-e964-4c35-bbb5-46b82c84b1bb
 19 943af210-af6d-47ee-a664-b888fe78e85c
 20 f2dba22e-b3db-1579-bb38-b27a5ef29cd0
 21 81172692-5567-11cc-bd79-156dea4c1c01
 22 bd844fc1-7f2e-6883-9742-4bdeaaa728d8
 23 6ebcefdb-fcfc-7b8d-8c12-9aa18ff934e9
 24 7997fc29-6ffc-0431-8ef0-b398b4b67b57
 25 cfcc116e-0f26-4f32-ba99-50ecc227bc13
 26 257fc94e-96c2-8e57-931d-7f5fbaa6844d
 27 b7fae9c9-7453-1da6-87ee-7a80af2efdf2
 28 ba9d0170-fbef-786e-bf63-9a5f20163d5f
 29 866ddbc2-5f23-0f82-a7a3-31a94ebfa649
 30 189bcd60-7e7b-3cd8-9ead-a93c3bf0cb14
 31 3d57cd58-badb-7a8b-83c6-fd9da0874709
 32 bb3cf305-8fd9-4a7b-b696-b92dfcce0c34
 33 5946be51-c0ba-0bda-be72-f375dfbe496e
 34 be6f302c-3684-35c5-a841-17b6786bfe50
 35 737bab4f-53f1-5ff6-b399-45e15fd1197a
 36 b9021075-e3e8-4b12-884d-0bf70e578552
 37 9b003947-a7c2-1c54-b109-9e79b09d4599
 38 404bbb69-c273-8e30-8bde-0ceca570ad08
 39 e697e513-7e77-7bb6-ba49-0936f10a902e
 40 a7b4f021-b4ad-14c1-9b3e-ed76b0dea685

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5810112155264707844116704817037403541871. Exactly this sequence comes out of new Random(733).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 15 of Run 16 (seed 39,036,328): new Random(39036328), Next(8,64) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-11 17:05–17:10).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results