A858DE45F56D9BC9 archive

201207271427 x9o1w

explained decrypted filler

3DES(name+name) ECB, 28 GUIDs, seed 563

Metadata

Post ID
x9o1w
Title
201207271427 → 2012-07-27 14:27 on A858's clock
Posted (UTC)
2012-07-27 21:25:21
Timezone
UTC−7 · title 14:27 against posted 21:25 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
28
Filler GUID seed
new Random(563).Next(9) ✓ verified
Run
Run 18 (seed 6,051,781) (seed)
Draw
27 · predicted N = 28 ✓
Machine boot
2012-07-27 19:15–19:16 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+namerun: seed

From the post to its content

As posted (encrypted)

920A1606A2813C03 D26D6B9523E93257 786DF861984559B5 DF41A6DC5BEA8847 85DEF216CD231457 5E97CBCCB05AD522 69410B5A9D32E3EA 8C1531953A393547 DCDE7A87990EFB80 93F8A91FB576E749 D7243D58C7F844EB E0537ED5D3C36555 EF00672AB4F0083E 2393FF4C65746CD2 732A4086F465E2A9 015414BDBCFC7C98 BDA41A85239C4B7F 92B254D0B8F1B2D4 14A507CDA1459ABA CDE212E0C15DF74F 36D7A53FF06BF626 6BB8FEC42FB4A1C4 EB0F58E09894E28A 7A544F25C930FAFB 2E64C22598500E14 6B41A8CC1BC64E7D 9F87C34E0F249841 584CEC0E76235D46 0EE724EAE21AA4C3 0FC4BD1C77693DCB 6A492C7EC0034455 67478315D40125C5 1D55C9092BD288E2 F7C9843252ACC872 2C4641A62A30B233 80B1AB8AA7B47AAF 47DAF51E4D6465C1 D48A0549D6BD5B88 287CFE68370A98A0 FFC2325C81740E89 545B38C63E6C983B 1499384F2C92ED89 121DD445DA169066 0717D06C85B40447 2551CED309D11C27 E9224DF4F76FB824 4EAA2590190D5376 A10DD52907599BED B18DCA2EAD274910 D2B70E770E8F6863 4DCC1664ECFFEC1B 622DEB9E0C34F9C8 E5E0718B04EAF5C8 A0FC84DF2886782A F3FABC9369ED4667 04A54054AEE6091E CC2080FAD0BA7454 F9A5D4B7150CFB29 DD60DB60153A3163 6D49CA4B76DAAFC3 764A926C705D7589 771208FCE10A71EA 4FDE7A3E8C16D440 C33A1953999E01ED 608D101348EC1453 76E44070A0376C94 FEA274968DDD3801 0300ADCA1D1BC50A 96226D7089E67538 BE5959D1BDC8D218 53F68C79D4CC40FB 1290E9A76142379D 65C946E87C1BB14E 2F40C58E2C6FF271 894A51ACB61ACE7F CC0C03A4E8952C0F 7B55284F33660A50 0290C423419F95F1 9118C6C7FC403D87 F319D42F918324B5 57100E8897443612 5C2BB17F8201BD53 DDFDC2354308D6D2 E3D54407A98F114C 3866075E5426E57E 24B0F0B3915E6CCB D6088FB0EF86F794 333BD8DD8D5AA8AC 31BA499950B09041 35C329B4ABD73D04 2476A63BBBD7F9C1 A7648672C7C30C05 A15FCD3925807FCD 3C3468980A260BB5 54604973CE1F47C7 2EC1E85E3F692B45 796ABB8C95445A3A AE19B23D8A3A33F3 069900222DBE71DB 05E71C8E7CA64EF1 94CB3B42810742AA AA39849919EDB0E4 53FEA0C0C31874F8 03DA7B627F1F84BC F24CAAA4CD16D2C2 4529338C4561E9D6 9A616F757036270C 3CAA21246847C2EC 957E2DB12A82AA14 40F154FD10F26148 C586BA94156D84D8 D1E514D067881396 12ECFFDF2899BD4C
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 59a6f442-d01b-722a-8fa0-3baaad5f6e6c
  2 f18f9213-006e-0e9a-8251-cfea345bbfdf
  3 f53b71a4-72d4-2863-91bb-73af11d15f78
  4 1d63212c-f656-6058-b228-f61bbf8d3e2b
  5 8311fc0d-5f8e-365d-b6ef-6c982f00fe9b
  6 964acafd-4f48-52e3-90d1-3c59c5f01d6b
  7 330aaa68-75af-11ea-b996-674c2e4e30af
  8 5de1d605-8fca-801c-af76-f10309242c61
  9 870116ce-2ee2-51ed-b162-0dac24c30dd0
 10 99596ae4-964e-7c28-b165-e07edbaa8f31
 11 2dd12b71-3d34-00dc-87a9-6db824d52912
 12 6436e81b-a956-0a91-9a13-3cbf12112444
 13 b7413328-ee29-608d-91ce-167cc4f6eaf6
 14 be91e5be-80c6-3730-beb8-685c98338157
 15 327b5caf-621d-084b-b17d-c1e33e2ba610
 16 41d54ab5-b371-5c16-9ca0-ec65b05603ca
 17 957f8e6a-1b0c-4d44-87aa-b7184b54a604
 18 436f3138-a8c7-0779-9e62-0483176d1afe
 19 23695ccf-4c78-87f1-9fbe-d3210174d7c9
 20 eda093c8-2157-25f2-928e-7ea4613ec76a
 21 d893c89c-d294-5771-a37b-4169b0b73ee5
 22 27a07a9b-d0c4-8aae-b2d3-620faf37de46
 23 35d643b4-d6a2-1c9a-8fcb-3bf88d70797e
 24 5cd772d6-5a9e-6fa9-850f-2a278d9fc68c
 25 5d465215-d264-7431-9369-379e3135bbad
 26 f6cfb839-88c9-5cfd-94c5-198a05c8f80e
 27 6dae1484-a83d-865a-8075-d812651e7d36
 28 0551a9e0-e4ce-4146-9573-9fd70fa2e851

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7026351857006305408258167584. Exactly this sequence comes out of new Random(563).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 27 of Run 18 (seed 6,051,781): new Random(6051781), Next(8,64) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:15–19:16).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results