A858DE45F56D9BC9 archive

201207271300 x9ily

explained decrypted manual

Single post: 47 GUIDs, seed 50. 3DES, key MD5(name+name).

Metadata

Post ID
x9ily
Title
201207271300 → 2012-07-27 13:00 on A858's clock
Posted (UTC)
2012-07-27 19:57:40
Timezone
UTC−7 · title 13:00 against posted 19:57 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
3,024 hex characters · 1,512 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
GUIDs
47
Filler GUID seed
new Random(50).Next(9) ✓ verified
Run
x9ily (single)
Draw
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listmanualarctic-onlykey: name+namerun: single

From the post to its content

As posted (encrypted)

C913BE31626F483F 3F406C017FBA744A A434D5B0D2761A13 A3B534FB2B8A8DF8 21A7D6BBAD5244B0 E99D489A86125A38 6903244DDB0D6DB4 A50782448774B501 B91CA083D1657028 EF1AD036BA3147B1 C257E606F1D743F0 D8AE98230EEC9EE3 041601E4406BEA9C 2DC079B2F7E123E0 25DF871D01B388F0 0FDD7E46BCA17F44 18AE0D4CFE33CB49 4A4D4F830D4C6989 ED54E37CC16DD8FF FA5F0F4A47206FF0 4A3B5621E45C80E6 C0140BA7B066AD6E E88AE8D627975D9E 711184A9D6D7548D 99897571BCC553C2 34DE54D0CC3C4B19 5A68EE4AA5D534CC 95911D26E94D718A A2035B5949F25797 507BB8508F0D0551 359FF828ED5FFD69 5F1AB9339D76BC93 51E17C37DCC3689A 8ADD78ED19C32C59 EA7EE54F1BECC385 ACC1224D5576D1AE EC9B8905043F21BE 25F5FF21C4D360D2 D96A09D24F6D4CD3 A24C08C8092D1EC7 2115CC950A4B52C6 F77DFA082C01A184 9FC75D0A91AD86C0 AD1FEBCC74A0F7A8 42B7B7DC02D2D12E F8B05F5AD6F8AD33 42504015B01AA469 0EB7FE167BE6C167 F5067322AD63CC73 5AD2C851023B9E22 71F8A954B80C0281 B900EED1992EEF39 BC50E2A3CD56B1CD 8EEC6A673E6D2A86 81A62636C496BD83 02699E5F755B51A4 9B5D7CF7116F0C61 65AB35571BDE3D4B 59FDD0CD34A23081 064E83088374A05A 35C3728E0BF06D3C BD121BFA9A0C4ED2 D031230ECE654A25 D20AABB43301C022 15EE747FF4BAEB4D 48A81F8215A9853D 556090E717F298D5 58086F380FC3F436 B98CB75808BA06AD BB735E97DE7C4FAB F8D68C962E5AF538 A57115C3C53D39B2 A6CE1285432A247B D8F7E4E7426F35B4 A556C3F1E1352580 83E689ABBEECDEB0 D9315E8625131AD8 270E7A9617CCE930 63018299AB9D78BC E48EB584C0A0462A 1CF14C578D6D6A87 9D077E13F71FEDE3 2EEB9C6531090B05 380F31B0D24D2AC7 5A652A0FBB225F78 BF4AAF012C717965 16D4509E98C81AB9 9D02515FA3A27B89 DB26F047A68A0DA0 BFBA6F1807294902 D27FDF43AFC91A2A F8FC2CA154B37897 447D10DE87CEE1DB 53716524391AD280 95B7442CC8B441A1 CCE938CA33F9C1A6 795C2463C09D2361 2D91220E09165637 EFE36E99BB362565 5B2F21352060F5B8 72071FD3E7ADBDEE 0A649306292953D6 1B0E9877DE27584E AFDCCB5977AF277A C02DB736473ED123 0D33E62BDF34D3CA 4D354488C8455BD0 3498C5E07B7ED49B ECF75D4A5B32014A 05121F6C401E9CAB 648FD7735D12C6A5 075C0B4319F51785 E809567841FCCA94 4F75813415AF6511 DFC7B13CC0AEF92E D660338D85B5C4AB 8EBE9E6E22A6A2B3 3593E284EE3AC900 8F43B29A24EF5216 2D3FCB46979322C1 8908A68A10EF3C4F A7CA9E66F120961D E1EC063DAE5F3879 894A4D4F70E0EE10 C2964B484F6FB071 8C71A0606BB341D1 79057DD8097283A9 0C98AB3A05DD7D2F 2048A57E093D0A9C FA6062AA11AE6F09 25B1D3D72B1C8E48 325BA7F3E2BCAF86 3291673D43D001E3 850BFC901DF82371 CF086D5F52CD04AD C5C6B91B73918C95 27196D630DA634D9 36E263AE70A73585 ED93F97CF3F2AAC7 6FDE8DC5D2574BD7 2BC4F971D2E44AED 529AC68D72895EB0 90BA2A728F54A1A9 0EAF714432583B2E A7B31B59D344E577 51C89EDEEE7F2EC2 791228E780A01FE1 B9828088C1D473F7 A4683EE478182597 50D8190E2A819CB2 72CAAD8451D46E47 7F84C8503AA97340 E529D4E2F9514486 9CBA13F065CD10D9 CD6CA4754F0C8365 B9E122FBE1EEDAA0 30CDEB15991AF69B C2B0D55AFC43190D C7068B6329CB1008 F3EC3CF5B4079692 53D84C067874F419 6705CA8DED49C39F B08A55927FE1EA37 4FB6F4D5B820D6D9 9FB4B1A53760FCDA F2D91928BD8117EE FE9A7D50331F300E 4F524EC5EAB92464 FCE7592D48E99AE9 F5475130F9732071 912044CAED0411E7 6F30AA2F28AF02A7 3765E815D4B464FB E3B3BF1DAC9ACBDC D4B23664FBEAD311 0B25E3995187126F FE373FC71E9E3D33 5CDB6CC2296C4197 2A86DFD69BB6A7B5 996C4228D1DB7AF8 773BBD6EAB429086 5FDAD3FFADDEA23B 9DE3EF834DBD20F7 629E6B81D0CCE3A4 93A685466AED6043 6BB6B1124C99AF8D 252C070E17B431B1 38F63267CAF2B1F5 12ECFFDF2899BD4C
  • Read the ciphertext. Strip whitespace: 3,024 hex characters = 1,512 bytes = 189 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 47 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3e8805ff-ba74-790e-823f-1c5e4eebe6fa
  2 669e2b06-179b-47b9-8514-f4ff88780403
  3 7c36cf79-5544-65d6-bab5-8c46beb4f33e
  4 3a3797b4-cb62-2b06-bf9d-2bdb5b1e4a1f
  5 b6156630-223d-7053-9899-06325330f336
  6 bf9d651e-37ab-2482-b8ef-cffe6816ec4b
  7 3b8931f5-3c0a-285b-b00b-2050800c8dbd
  8 6a070cc3-1a6c-4a1a-8b19-9f076b392e5e
  9 ecb84cc5-d315-10f6-a90b-56f0a1f13337
 10 1f413d05-f70a-603c-9678-52400e323586
 11 a8d330ba-a1dd-1e64-9b91-65c6e4a8fb2e
 12 e3116bc7-cf0d-40b9-9c35-fadc799f9aaa
 13 68459bf0-9ca7-0cdf-9d07-347e639352f8
 14 ad349f73-c0dc-4e73-80b6-bdaa0f5465d5
 15 99aafdee-4cbb-86d5-a3df-b158364bb892
 16 3312f0ae-d0f1-2544-9245-403827f1a9f3
 17 efed2776-74c1-713c-933d-96e1955183da
 18 95beb918-4336-8a59-beee-6fd749c1f5cf
 19 0485ae84-1e3a-097a-8c5b-1205b4013151
 20 10e500bc-2568-6d53-9e84-7442cc88dcfb
 21 4b0062a6-df3d-4a19-a868-e1c2f15b47b9
 22 150ed0c5-01cd-1669-a177-685764bb167b
 23 808a742a-9db0-3b57-9f41-72080dffe2b5
 24 1866712d-aad3-4aa2-b3d1-df744008a03e
 25 0bdd4a19-1c1d-56b9-93c0-88b54257463c
 26 8a3a8050-14c3-696b-b835-a8c2848cd6c0
 27 1384f5ce-fd30-8c74-8e6f-3d381d2feb15
 28 70ae09e6-6f2d-62f3-8eb4-67e1743b8e71
 29 969a878c-f30c-3ec4-84b8-c0f999188c50
 30 bae14514-ec38-390e-b85e-f9ca7c39ea2e
 31 f634aa4f-b2ca-5eb4-8001-1a02220ed359
 32 f0dccd19-471a-5005-84e4-22af1c4f7620
 33 f24bf4cf-d666-3114-9706-8fba2ffd7587
 34 4ebe868d-74ce-2a7b-9244-2a0a1af45c65
 35 2b2269ae-381e-0bb8-ab70-bd36ec892e90
 36 4f4680f2-2e4f-8ed7-b24c-7a991fb47970
 37 d818f24d-305d-42c6-ac66-cab4ddb49eb4
 38 d35bd13e-e2fb-4919-9ac2-8ea5c72aa421
 39 b74cadb8-145f-855c-9ece-7fc2329d516d
 40 959e597b-2861-368c-8645-3044e2e6aa6c
 41 8dcd8e67-37b3-8bbb-866d-339e9dde0358
 42 289999d7-6c91-5641-897b-1bea33988b4d
 43 11888d41-342b-6259-abd9-fb938c355a6c
 44 a97594d6-8723-8c7e-b6b6-737e255827ea
 45 3ec6da87-fd5c-28b8-9022-9a93673563d4
 46 e5d76300-9cd9-7118-828a-97d61073c64b
 47 cb8a106a-d6bb-3cc0-b790-057ee3d70ec1

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 74627224161404827806413456863355320844838568273. Exactly this sequence comes out of new Random(50).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. Grouped in x9ily: single Pacific-titled post 1 h before run 18 (x9md9): operator test start
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Solution summary

Method
MD5(name+name) ECB
Result
3DES(name+name) ECB, 47 GUIDs, seed 50
Explanation
Pre-cutover filler under MD5(name+name) ECB; single Pacific-titled post 1 h before run 18 (x9md9): operator test start; list seed 50 from the GUID masks (3DES(name+name) ECB, 47 GUIDs, seed 50)

Related

Findings: Mask digit · Count RNG & runs