A858DE45F56D9BC9 archive

201208101858 y0s7x

explained decrypted filler

3DES(name+name) ECB, 30 GUIDs, seed 357

Metadata

Post ID
y0s7x
Title
201208101858 → 2012-08-10 18:58 on A858's clock
Posted (UTC)
2012-08-10 22:55:51
Timezone
UTC−4 · title 18:58 against posted 22:55 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,936 hex characters · 968 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
30
Filler GUID seed
new Random(357).Next(9) ✓ verified
Run
Run 22 (seed 528,385,484) (seed)
Draw
42 · predicted N = 30 ✓
Machine boot
2012-07-27 19:02–19:13 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+namerun: seed

From the post to its content

As posted (encrypted)

2242CC1E7BE21870 277471FA2400AF68 0A8D4DF272FFD664 3BB9CAB3476A5B61 4B0035B50C2C13FF DD85C6D81E033995 81358655255D1113 81279E51448536A7 3512A03C9ECC0652 08F1E5F5E8506443 FF12ED37D7A3206F 67D28283716509A5 5EFC4259676F5D7E 4F73A3C088704D1D 56F176BA05020E07 1A78A43AFDFA9475 E18A762E887970F1 F2478A5014117F18 97973FB51A8D42C2 E5E3F6266160E170 FD39BC213F3412B3 384A1CE1C861C6C5 D454694ACF148C60 25EC1C9E4E62702E B78C2E647CF819DB 23619C552AD47585 8A71637618EBC677 E306B596F350BD01 3B5687A7BEB93D3C 179726968ED82145 7F12D0E2CC05AA4F A5D4C3744F909082 F6978256F477D735 12045B44F392C549 402DCBB278EE22FD 030CFCADBCF8D434 0C7DC3475439C7C3 668387CFF3C2EE4A C120D351E23E1270 74A85622C024B585 ACA00098AF426A90 D812192D15852191 41195EA857B022E6 29F087DDF619E797 345E1CF0396C894E E30545C5D6044696 C4070D027C35F14E 6D06BDC98A99DEFF DC2266C44525F2D1 F5389BAA76C16149 E248E1BEA75E3E1D A3629E60A6F843CB BACFDDB147864F3F 3A3B6FD2E13557A4 2DBCF6E39DA7C580 CA07BD55F907C9C3 B6075B3EA6FDADD7 30230167357ADDF6 035CF0FE47CABCA5 8AC0851C59FEACFD DD3F1ACAFFC48663 077B10E777324AFA A85A60EBF623C699 8F2CBE4CD72517EF 616CDA116D9A78E5 A4841CE314FFA2D6 AFAC1AB75619ACE8 98CE5B41378072D0 DC622F778672E8FC D15F91C56E8C2C8F 34AC2961A35794F9 97413451A22B3BE0 7F6B916B80644373 428DF94B330F6380 4FADBB842CD5061F B7C0AC41C4FC2DFE FFC501E33AC45142 36964B9509733515 3C5407E1377A6CEC 2DDA35AB7FB63331 879888B57B04D490 042222BFFB18395A F07C06DDAB951B3B F3615A7ECEA32039 9CCD90D5973C202C 8B330914EA2225F7 1AADAD815DF98599 7A1985E083E55B64 54B6B3B6F4FF01D0 ABEBC1BA09D69B3C 60FCB9541CCA33BF B5ABF8D7725AB08D 9EFC17A40A1333EA 26D1445507283E7C 73D370D417494495 EBA17F7AB4CF558E B5D70DB40C06CA3C 92221351862BD02B F686F5669C13C8FC 8F25FDE811252022 D4E328B26289C81C AD4F28D29AB115B3 26D82493DF135934 41262677BBDDB3A9 8762A459508C55E3 51F69CE6F6A7F6F6 F273C3C4ADC6D818 99A4A78EFBD22361 68FD8E7C0BDA4485 E3419E587619A75B 93EF641CE3F9933D E7042DD378BB173B 371387DB2B44C8DA 840F7F278ED8CB42 CD0123B64FAE886B 87C2973F88190AC1 E4477D2EDCEF224D CE0C5C6DC715D66D F9C20E636762D2F8 D7BB3A309D582988 12ECFFDF2899BD4C
  • Read the ciphertext. Strip whitespace: 1,936 hex characters = 968 bytes = 121 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 30 GUIDs as hex (shown below).

Decrypted: GUID list

  1 28bb2cdf-6d8b-289e-b12c-79a3470ce395
  2 19b9c545-c9a3-5333-ae80-5c35424480ce
  3 64ed3e25-2f57-23c4-a89c-30d1cc8933ea
  4 6faa1b5f-af98-6e04-a749-1fcce7751a4d
  5 6932af2f-1d2a-310a-9e10-b89448bf78ea
  6 36cbdfe0-bd2f-47d0-9df0-df09bfe39a50
  7 4cbe7982-2bea-7211-a65b-6f2c80f2b30f
  8 48c7f785-834a-4dee-ae6b-140771bccdcb
  9 2f90c7c3-d915-159a-9f04-bba8f1f80c22
 10 79cb73eb-efb9-8945-b690-8db24d62f42c
 11 54735cd9-2dc5-26ee-8eaa-05efbc5401ed
 12 042ade27-a637-1525-a04b-65e37a81b656
 13 7a891b43-7581-09bc-9075-ccab0bfc5189
 14 78279783-5ac9-1246-a3a9-9b4aedfc7536
 15 d10d9cde-904c-7430-92ba-8d8274cc2bc8
 16 e6c8463b-c80c-8ea7-918f-43e0e9786788
 17 e219b6a7-61c9-8147-a242-078d6ff197ca
 18 b9e2dbb2-68e5-3329-b9b5-b57a2d7497cf
 19 018bd8db-124a-3141-9334-774430f78a45
 20 3ff5e680-0916-412f-bfcf-1943bf97d146
 21 a4435a2f-4a46-2ea2-bd44-c749028a0495
 22 296b2b98-c739-3a57-8c1d-bec9f636f3f7
 23 c18b0df1-03de-216c-87c0-ead01ef0c215
 24 290c7d24-3313-6848-a704-348b65eba57e
 25 b0037721-fc94-6ede-8386-77be4f4fe41f
 26 c0eb3b2b-c55a-1c53-bd93-0ab6d6c93d49
 27 03f4a395-c056-7897-9d61-794cd22de674
 28 df08d05f-c2d2-7472-b65e-ce7d42be540b
 29 18b06dc6-5b24-169d-88d9-e8e48c357965
 30 18a0d359-baa2-5c4b-a028-8206b12207a2

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 252634741821017883342326617715. Exactly this sequence comes out of new Random(357).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 42 of Run 22 (seed 528,385,484): new Random(528385484), Next(8,64) per post. The RNG predicts N = 30; the post has N = 30 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:02–19:13).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results