A858DE45F56D9BC9 archive

201207271413 x9n66

explained decrypted filler

3DES(name+name) ECB, 31 GUIDs, seed 234

Metadata

Post ID
x9n66
Title
201207271413 → 2012-07-27 14:13 on A858's clock
Posted (UTC)
2012-07-27 21:11:05
Timezone
UTC−7 · title 14:13 against posted 21:11 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,000 hex characters · 1,000 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
31
Filler GUID seed
new Random(234).Next(9) ✓ verified
Run
Run 18 (seed 6,051,781) (seed)
Draw
13 · predicted N = 31 ✓
Machine boot
2012-07-27 19:15–19:16 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 1
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+namerun: seed

From the post to its content

As posted (encrypted)

E8CAEC861A63FC98 5F342F89B4A302B8 FE4E33C769E7F1B6 7C24D4D9C65D0F08 D1A5A23AFC608565 C4A62C216F506A33 2824035878C4A945 F2AF852CBCCA80F1 D3F7908CB45319DF 3ABFD6F1074C82EA 6C9228EC84A36743 EB9297DBE9E9338B CF70989B8B7608E7 9C82F69A33030B50 494F7F140ABD6DD3 01C48C4DEB9FF5BC DCC387E3C0DF3DE3 457A14FDB421BD3F 69694AF02234AD2F 4C035C29F4EE9428 2E72DAE4931AFC0F A9A8FFE4CDB44E84 7EE72DAFDEC6FD5F DBF07F6DE6FBFB90 ECF3B9FD69B2C97C CD8252031DF56C09 AFDE93BC299D7F7C 3563487E9D1ED0D2 B768A895ABFFBFEA DD24A80C3FD2FBBA 2B4577100E3513A6 9345E0807548033E 36E816643A255D66 43E97F7BA2FBD534 D751B6363F0F889E C4E6E9D9AD9FCB9C C460B6D636EE8482 D8C3DEEBFD5B18E9 1E6F2A2E7FF33318 95CCB000985297DD 415088A592703C71 E8F5253B0862C81A 78B45966E6D25E3D 797A6A6E3D2FF99A 3F531D78FAD6C3B7 66D7DA10F735B00C 6DD73B5F4D72CA88 6B798279B7D9C7E3 6274C9B14BBCB468 42BE19A4E633FDDE 68AA4F0EB777840F C39686EB3C41204A 3B15599FDF8FCFCE A3419EF2C5EF6895 B3B3CC3A95BC5F68 8343C7C3DB797A4B 3361691866C2D83B 604891A10B6915E9 635236ACFD069D3E 3D4DB6C87433704A 2B9A13C698D68178 A64A8262528C5766 CA89EC895D6CAAD9 C7FBA68986CC0216 9D177952C7E9531C 5CD958707D0E3DEC 7B3E40CF4764F1B1 D737AFD2D915F13E 07B9CC742F7E4319 D08BF9DDD9AD8AB1 6EB0A99CCD5FD487 98731E33141B1617 9D23662D461C9F0D F6754CA84F46C716 6D5F86DEEBDBAF52 1FD2FA1DBF54B3BC 78ED7B1ADA839AF3 B15AF9419C204FFD DC27C14BC2F1C2D2 0BF4DFC861905E09 2B5CBBBAFA290983 E1F3C65CA187D375 5430889318B7EE04 2E8D99D2AD7F41A6 F2A78669E8CC3CB5 F76B71469E7DC141 3FC70B1E1F47B51A 433633A7689C5D79 790938AFF6581E69 B8B22CAAAF65107F 57DBE72EE4BA5E11 D25CBBAB914BBFEF D7DEB9E48D417FC1 CA72545FD44C3067 16853D6F2FE41F5B 7D88672909C55A85 9F99C1AD9F5CE1B3 9E2C2DD4400526FC 3CFB0D1D90E46AC8 2A592AE7C1D0164D B5F6056CD9BF65A0 874CBE4AFD0CAAE0 C4E1BB7C9D3D1E70 5EA76028C059A465 EB24D327A552B694 3A03BD51966DB468 C187327374128C3C C4996C8A22100913 C37FDB8547A9F8C1 8DC44EFC0CEE6342 90661446CDB6EC15 93628C3D6F03A242 F9177377547FA826 DD5D932E284D0C04 466659A95A839EE0 CD3CFB4EE155AD21 200EB513CE1E473E 640FAA7FB3F14E51 3B22BABEED514EC6 A73B6BC9D969B742 319A471241C95C21 09E15A28CA3A5028 81CE2CF6E22EBF7F 45F32E0315F592CC 12ECFFDF2899BD4C
  • Read the ciphertext. Strip whitespace: 2,000 hex characters = 1,000 bytes = 125 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 31 GUIDs as hex (shown below).

Decrypted: GUID list

  1 8494ac30-3008-8e6d-a50f-e8f137371363
  2 42ee6920-9d53-4a49-9257-35ccdabec272
  3 aa0c5b10-b969-2a5e-ac1c-0937770762be
  4 6966c50a-1581-4737-9b58-e136b52fed48
  5 fe640424-7d89-75ac-99cc-0442cfd4351b
  6 9134cd48-136d-00aa-84bb-4e829a673491
  7 bb6d81f9-933c-61d7-b3b8-4106e5b1be26
  8 1bd46a6b-bab6-7701-a3d9-98b54b5198c2
  9 135ae36d-f7a5-8805-8169-8fe50c8f53fb
 10 9fb74ac0-3d67-5b6a-b1ac-c8e2d6e1be56
 11 e7e8393a-986f-6c23-bae5-ce1f17b0951e
 12 bc7e2c54-6dc5-1eba-a5c0-f18053691c1f
 13 619bf37a-4ffe-44c0-a24e-54c18ac20ef3
 14 c309521a-2589-12de-9b97-46dde086cfcd
 15 8b077096-edaf-6b66-be67-b1b9d2ea44e4
 16 480cac0e-ff6b-19ad-9956-0f8824f365d5
 17 d58ae2c0-9440-2cf4-bcae-a32ac3e58b4b
 18 7bf342bd-48e9-03e7-978d-a2e9f604baf2
 19 854dffee-98e6-0d8f-914b-6f74f78250c6
 20 5365601e-08b2-8b21-9900-558a32d7f2b6
 21 8eee3b09-9d51-8aa1-b026-cfa10cf342eb
 22 4b2227e3-ecff-2fd1-82f7-b333725bf1b8
 23 46b62a80-aa9a-4541-aed6-aebcc6c253ee
 24 741f1c87-7ef5-729e-a6c4-0716cf6a4b8d
 25 f5e5d573-61b4-5576-a350-9a10a535062c
 26 81f6468f-be35-06af-8715-42273b0fa45b
 27 6a1c0287-6927-18a7-abbb-de8c373f1351
 28 551ef723-196b-610f-975b-fd2a48645849
 29 5d67a174-d2ef-1ef1-aadf-67b2988796fd
 30 b6d6083d-136d-48ad-b0fb-f110528356c5
 31 39d3d48b-9a77-5142-8090-bba0c48c8d10

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8424706785614161200882475016145. Exactly this sequence comes out of new Random(234).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 13 of Run 18 (seed 6,051,781): new Random(6051781), Next(8,64) per post. The RNG predicts N = 31; the post has N = 31 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:15–19:16).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results