A858DE45F56D9BC9 archive

201207310613 xetvz

explained decrypted filler

3DES(name+name) ECB, 38 GUIDs, seed 579

Metadata

Post ID
xetvz
Title
201207310613 → 2012-07-31 06:13 on A858's clock
Posted (UTC)
2012-07-30 21:10:42
Timezone
UTC+9 · title 06:13 against posted 21:10 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,448 hex characters · 1,224 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
38
Filler GUID seed
new Random(579).Next(9) ✓ verified
Run
Run 19 (seed 257,878,531) (seed)
Draw
4 · predicted N = 38 ✓
Machine boot
2012-07-27 21:17–21:20 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+namerun: seed

From the post to its content

As posted (encrypted)

91D30CA936723CBA 42810A5A125D9C7E 324681090CD5F6E7 E07A54979E6A867B CAACAC0D267AEEE9 ECF619E3EDBE9E95 09833EA05553869B C9363796F3A52B6E 3A1EC71E8D8980E9 A1319D68EAF9CD25 9A72C209651B11A8 D203812BFDABD91B C8D6E083A8A87A76 5303B174E13018DE DF347789A992E4D6 37A1FB9B7BF24D3B 13BEFB5B3F523BB2 1F61C02A91319173 1D95DF8EB76315F6 C5833F3FDF30CC28 6D928E8AE9F94895 391701D0BA22BC39 9463E84A90133D5B 4092C3FDE5111794 0110B2D152129063 5D0E4F116FDB241F 9F09214BA849FC09 252FC61F897D51FC 94681777864A010D 87DE73BE773417CE 35863C247AC735A9 4CC7283D45DEC1DF 25ADBDC6281C5C04 A93B66559F3D525A 39A11F1D12553237 E7D4BBE6E37D947E EE36F6C3FD99CC6A EE4405050E750BE0 D972AC04665D40CE C0A8E2D713CC4FBD 3B30A327B39260BE E006EA4A970EDFDF D39EB6F02CAD86CD 3E2A56491C298338 CE6EFCD0FA6BF9CD F3705D1539B2FD88 718323EF5C3EB628 E31DC0C55ACC2394 E87808333A60CC0E B0D3836EA78792BF FAB43E173F7727B2 2C394BC05B1F8F54 BBCB3735DB2C2226 BF6E5E03F21E3DDD CB6985263D568C71 ADCF1DA4DCB6D56C 0B0BA52DF07F489A 9E8D68F496665A2A FFD0C5601F0810F7 60AED4616A5C5645 38D5D26D82BC4D45 527E96E2106408AD 8DB4CE83544AA533 0FC6AB6CFC6B3884 AB24AF0B5BA0B872 92FBFDEE4E2678AE 50C3602234D7A88F B94453099E374CDE C9159924BE7A6768 F31070761909CF58 339AC414952E0B47 1337D992EE383C45 CFEBCD3BD1B6AC48 E3427A30E0C494D0 AF65EE4BE9764E82 8C041272CA4CCC4A 353F93B46C395202 B3438D49ECFBE657 D9669B3D409ADFA8 96975514A934BA0E 3D86324B653B5951 A9758B33381FEE94 B09685187447945B FF6D3A461F9DA06D E9F6B7C39D3EE5F3 0AFA268EFDCF31FE 0FF5BAAB658B075E 60BF5667B10C6DC1 1EEFAC8D9A02EBAE 1EE43B2C77DC44EB 84B3D26F8A0AE36C ADA06BE464611473 673EDD4E43879D48 B1DB02329FE60D42 30B892E4EF8619B5 FFC0EAE63D65E6F9 302D3EEB09980F25 7BAC055D719DFD4A 0126707CB006F496 E69171F99BB882A4 2AF338F75B936883 CAA5966C4E45E3D6 1595E96B34704CDC A32B8320226DA0E0 897C218413D5494C F0C7526B0C38A701 7BE872F69CE0579A 8D6E72ED3F153960 0119EAB6EAB14630 4C0D6DDE1E3ADDFB D62BF6F35FC6B61C 9703223A0150635A 872B655BD4F27665 BFD45B85E1FB6CEE 7654B0EB76EDC0F2 86C29115A0255D9D 906ED1CF912512A9 C36A395461BFF1CA A902AB8B0B1E8272 3FAADA18F4ABD998 1349A69F26C42868 637C8C98A29FE64D ED023A3976C84541 4F7FFA067484D1DB 392919C3A6C4C704 3431DBBD7DABA0C0 860126D912F4AE12 FCEFD42DD35FC8C8 2F83B9C5D285F9F2 ECEEEFF85FD00683 44DA7A9F9FD8DB5B 07DE2D89B7F65A1C 7B02166A7E626A18 B54F6F7565C35F75 D8B273CA0B40EBC3 8B767854C18C6F48 F27CA5D7B3C29841 3AABDE24E5A3ADB8 7353E0302E02C47F 4E8079E1D10EB6F3 FBA7BB7C2042E029 90A40B7583C908CF 8342CAB821B6CA1A 38DD00B0FEF784BC 8F1C57EE865CAB9A C2C1AF7858278F1E 1B857938EDA854AA 1ED3E9F867D85C54 1D36737CA4A63D3A 90B1AB73C2642626 18B7EB050B074897 ACBD81906BBBD189 12ECFFDF2899BD4C
  • Read the ciphertext. Strip whitespace: 2,448 hex characters = 1,224 bytes = 153 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 38 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a0837d9f-feed-1e19-ae2d-d621d62f2dbc
  2 40ea4aee-1aa1-6184-af9b-67ed284fb622
  3 2b80471e-f3bb-4dd5-96d2-949197c8f968
  4 cbe2b976-c20d-1884-9e9e-e02ff93b4959
  5 104fec8b-9d59-58f6-b373-3acb625981d4
  6 402f0b59-acac-43a8-b9fe-b90675632065
  7 178b67fe-b2bd-297b-94a1-f0586d338549
  8 53dbc9d1-010e-860e-b910-94602bd9c668
  9 d02b1ad7-3250-5997-9448-a042da38c0ef
 10 dd6bd464-69a0-77b7-8050-217029a6b406
 11 1daf8ec1-f8b7-7e52-a790-cbe91a59f0c6
 12 7f6cfcc2-1f8c-4535-ac46-4c40fab13c3c
 13 9cf05f23-479f-663a-a6d9-a60983a08f55
 14 eefb20c3-0fc9-691d-be2e-2020c03870c9
 15 c6574e31-a3c2-296d-b8ae-b18d94a469fd
 16 d1e935b9-1b8f-5f1b-b409-a28d0f7f9175
 17 1c6a911c-015a-20af-8cc8-985ec7cd9459
 18 b8a8ac96-5c8f-8d77-9ad3-0a0ff146ad67
 19 0787b717-7c97-3c77-a30a-8cce7ab30a35
 20 d2502325-d8ea-42a7-aff2-83647e0d3f7f
 21 c91bea7d-8af3-6049-acde-fbfa1162224a
 22 ad7d70d1-5ebf-87eb-bb6c-7667d72484ef
 23 2b7b0a72-ca39-7cfa-8916-955b75db9446
 24 4e0de6e5-6dde-2910-bf1e-61fd944122a6
 25 2aa6d964-4ace-46e1-a965-5820e804fe50
 26 12baded6-b4f6-8b28-a19b-87132bdc3f34
 27 e8825a07-85d8-6ee2-a5e3-8372a537031b
 28 d062b17c-af78-330d-b4be-26118116caf4
 29 752c3697-4f57-4e5c-9420-2bdab6367b49
 30 5d98cb28-6ced-35f1-b49f-6aa25fbf27bb
 31 898f7a40-8e59-8adf-8c67-7ac1c7209ee5
 32 12068a7f-2800-890d-864a-d1407abd8a57
 33 2d37655a-081c-14d0-9243-f76387e119bb
 34 89aedd0a-2c3b-4a7e-b0ab-36af3a1842ed
 35 b3c6051b-aedb-743f-a5b6-fd3a51c0dab7
 36 fb1de082-f9d3-72f9-9bd1-038b18d85989
 37 26d1e354-77ea-56a0-9fce-90f5569f3673
 38 f9769bba-4737-8c6a-a743-f9d0a397d690

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 16415428577466252834687248634388147758. Exactly this sequence comes out of new Random(579).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 4 of Run 19 (seed 257,878,531): new Random(257878531), Next(8,64) per post. The RNG predicts N = 38; the post has N = 38 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 21:17–21:20).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results