A858DE45F56D9BC9 archive

201207271403 x9mkj

explained decrypted filler

3DES(name+name) ECB, 32 GUIDs, seed 94

Metadata

Post ID
x9mkj
Title
201207271403 → 2012-07-27 14:03 on A858's clock
Posted (UTC)
2012-07-27 21:00:47
Timezone
UTC−7 · title 14:03 against posted 21:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
32
Filler GUID seed
new Random(94).Next(9) ✓ verified
Run
Run 18 (seed 6,051,781) (seed)
Draw
3 · predicted N = 32 ✓
Machine boot
2012-07-27 19:15–19:16 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+namerun: seed

From the post to its content

As posted (encrypted)

1C6151FAE535AECA 68BC7A96C5FB8303 0B025BFDF06B2A03 855C2C8334788E1F 7156423A20F227A3 13489E305DF2A7B6 C53F54B396DB0925 8F3150EF39BA33CB C491FBDC439F4921 3D992AE93EBEFB09 25E896D4899AAF2E 092581E936D15055 7757CACD503A1A87 4EC8E60E8DAE46BF A36E5F72F895FCEA 68933EA63D8190D0 A455ED878AB2DFF4 323029643BEE3E27 9DD36D05C1338E83 CFBC8F3DC24D68F3 662882FCB9A0BDE0 6EF93D173A2513AA A9CE49064CADA724 13F3D9FF3AC577E1 441539A76A488736 3377B79111FF2BAA E68847BEEFE61AFC 2E1612295829E728 5A3F3C8EDD7CEC92 2E0D8801990744E0 15A8844AE12082D8 5B516190E808C638 9ED57A0B61A05878 A7B7A856C7900CE4 C9389ED8DE89B0BE 54BDF83598362078 1B9617E620EE61B6 D8A34B932146C1FE 256650B17D5E20EF 869872BC359EA431 B16C2C3BAC8414A4 6FEEB9E984630AD2 83C0D68B6B754931 15E073DC710A8E4D 9AE0CB3E8ED2A43A CB05B1E3768E44DB F81FBF563DBDD299 E090EBB5C053122E BD7032CBE6AC543E AFDDF5B2AE4ED715 0742A8E421C6BBA4 0F9CE1A811D0A363 242D67B5F39A51BF 71F3BA34A6129469 20ADAB7437B30C85 7E2423ABB0C5E382 0A03D3163F811CF8 83CFCA7634B9DBE8 74E084838FB3311D 21B4385E29C175DD F9C77386D7B14E00 511C6B01DE6E72D4 ED2CF0613AF93EAD 5260F7C82EE82F42 9A94CED80CA9B824 02159CD8433B7DE1 2F8E4AF827F444CA 96E9D04B35DA5A04 67942C3162929E86 4CC6990FA5D4EA9B F816E1965C19CC50 A5591288627D684C 4CA09D74216F7607 EAABD2445C543B02 8134BFF5C48601D9 B7E08F94447E2899 6CC7C39F90E898FC A7D0CEB94C03BAF5 F6989E8A2CBADE64 D61FB8C19AEA21B9 DF71CB2DDABDBE23 3EC68EA6EA2AF337 F49BA725CBAB2C32 FEEFB6F27B89D0AA C01803235F2700C6 A2DE5427DDBECED2 7AB895B31BFDE9D9 DB0465ADA8CAAF86 3BA7E49790EE2A8F D83CC75604DB2ACC 827828C22D00C632 718DDC08ACCA6672 808485995DAD098F 3FE167DEC31A8484 A242209078B1F0B5 017B97B8C8FE7708 EC80530C76A1EF20 D384BB5F42A90E05 D1EE5AF9589E3406 365283A66DE048F3 FFDA406A4E99BEC5 E2C15FD5E20E2E6A 4ED0CE881CD9BDAE 5C1E88D977AF8FCC 147F83881C540673 1C674A354B5D3BED 7764E0AC55F589F7 574FA43B2F6985F5 1F51CD0A47974A6C E9C8E2463351B85D FA8C72C4347E6CD4 3A5351474B19E05A B6C658292BBB754B 8537D1DE34466412 893C178116FBBA5A ABAFAA4A41F3B30C 2927AF2CB988F73A 1867850B9854AB5A F98C794B1E5A877D 5E9668A2B64A826A 146D7EBBDD66DE08 CAD64C15A97048A1 2EE8431A899B8090 83792B06AF9A174D 24562E15DD4527B7 C5A0C39858D1B9EA 0BE4F54C8723322E EDE3F352F1AE4C3A 12ECFFDF2899BD4C
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e3035bb3-4b2d-7d4b-a3d6-bc005fc16ac8
  2 e05426d9-2a08-3ad3-8a86-d07454ed7c85
  3 d19d0d65-50b6-4751-ba85-d10fa47e60a2
  4 4d16b124-6e04-594c-8ab5-7101d93d37c4
  5 76ff1b1d-1e32-5586-8598-7792d63f8bc8
  6 4b10fe23-544f-6a93-9111-3b16e5cb199a
  7 e21e3e36-3f32-055d-89a5-7a3e67fe3916
  8 ac705ab5-d31b-5795-b568-c7a346e1041b
  9 a360ce49-c994-5baa-ac4a-018381a705ca
 10 92158473-5ed4-8fae-bd3b-1b11026b3019
 11 d5f574b1-e133-4b14-be06-423c0d6c3514
 12 cba85614-a368-7e94-a7af-2aba32a2f840
 13 285f0314-3945-2db7-85d3-e955782c79a9
 14 e25f1a16-aa50-302f-9861-2e8ce6cd8419
 15 530fb902-13a5-7bda-b9e3-a3167e62a7a9
 16 e41b00e7-f9b5-6b16-aa3d-ab7ca948cd7f
 17 b28b86db-6abe-3d26-a230-cc5ea5207b8f
 18 4b205803-73f8-2553-8d74-753b6a2f1424
 19 9b870b7d-5215-159a-91c9-120639db0f74
 20 601c018b-add0-6a05-8962-5952c27f8510
 21 632bc043-8fcc-268e-989b-d8d2a8448f9b
 22 ed772757-e537-868e-abcb-2cb9d2a249f3
 23 fc0031fd-2f81-7af8-84d0-c29fff872700
 24 d519b7b9-a0f3-7da2-8619-c2779a7b6592
 25 2fec9228-772c-80b1-a4b9-cf3882a6b747
 26 c94082d7-6b3b-8d0d-8170-0e18b44683fe
 27 8ac48dd7-2b88-637f-a25f-2b54f3e15de2
 28 f5348761-3208-8d80-8c88-91cee8acf90a
 29 4db37da3-f7be-487e-8da0-e5bb7d8a768d
 30 f31ae38e-fd44-75cd-a42c-8b414087f5f2
 31 968687e8-bca5-8799-897b-326f87febb2c
 32 b2f024a0-2177-1851-8cd7-e6277351b1f0

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 73455605584723763216287788684781. Exactly this sequence comes out of new Random(94).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 3 of Run 18 (seed 6,051,781): new Random(6051781), Next(8,64) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:15–19:16).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results