A858DE45F56D9BC9 archive

201208112110 y2msq

explained decrypted filler

3DES(name+name) ECB, 26 GUIDs, seed 126

Metadata

Post ID
y2msq
Title
201208112110 → 2012-08-11 21:10 on A858's clock
Posted (UTC)
2012-08-12 01:07:25
Timezone
UTC−4 · title 21:10 against posted 01:07 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,680 hex characters · 840 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
26
Filler GUID seed
new Random(126).Next(9) ✓ verified
Run
Run 22 (seed 528,385,484) (seed)
Draw
51 · predicted N = 26 ✓
Machine boot
2012-07-27 19:02–19:13 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+namerun: seed

From the post to its content

As posted (encrypted)

18212973C78A308A 4B6A53B898159C17 0D5CD04F40C4310B 399F7AEB4177A2F4 35C3027E68123F44 9F917F337BAB255C 97ACDA421087C174 F28A9B60B64B6DF8 608DF07C35EBA96B 7A7CA0C4768F3645 25567F61881DD037 526F4C2F57D8E736 C7564457FE0376CA 8FA077A38C6A2077 A31B3DC88FA18EA1 C967EA300DD51BB2 8D30D067F83FE959 AB582AC8D3332331 260AD69037D33238 3C552F8497D0475C 78ADC6772469FF1F 2EFC239C8B6923B4 204BD98442899C2F 4DF9156C558EBF77 53534A4C729FA7DA FD98C67B1D8A62D7 1CF5B9A7F8498549 D72D6936A7B298C4 BE94EF25AF9C5239 9F80BA583B7622B7 B2308766DFE54E50 658B805B99F6FA69 4E3CF6312673BBEE 2C26807E39727010 995B97D66E739F22 0BA8B9CEC1C3F997 AEFABA72D88981B4 14E776A7BE0FC3BA 07411BCB22153E07 19DC448E9D9CF648 F9B019D659D99A4D F5C761F3FF43B0B8 E91B29FB87E0B721 F41B4A8A380521D5 FF79DB9888EC1DE5 D2E0E9F99B5175E2 5E572D8DCBC4BA89 5CC1E6F5465C1B70 74F0DF04465EAEDA 6E076414812AF8C0 50B04F90D348BE12 963ADB890AF5E7BF 8EDE04156125EE49 13313E95AFC3936F 6E839807C626BBA7 5B536BD96DE61B63 2FACD2408F28DD78 B98AB0EB526249EA 44F2E4B3A8BEBF15 1D3BAFFD9E3FBD9A CCCF4BC5575569AD 2C9C136CCAB3473B CDF6C52E54EAA6B0 0D03518FA9C6C1F4 3BC98F5AEA7E457B 2DAED31334EDBB43 9A641F70DB8F44F1 A016885D5D4BDEBF 07FD5F0392E7E7F9 971E22F6AC088A13 3A5885C3F17B47FE BEB355175C64605F E03BACB336368367 E44CC99C1A5D3469 330E1738BEAD0C75 1C5CA40B8E8D2529 A651AA3D707CBBE0 9D1A4B5F9C52921D 5604271AF372755E E7520D246016E06E 92ECA8918EACE83B CD878CD11C03AEB6 9DFFD7010D0A9F8A A9912170879DE650 E6E7E2BF02B9C11A 707241F32E4EA13B 1C6CD2499CF366F3 7F4EBF85FA0A66CE 8D6FAA25530E807D 599D1A44514D3DD1 E99618055CB9247F EF18CFBF188722FF 69C58DB8D8355679 5AE71F9F5FAA9116 49222922E65DE8C0 E8760426D09ADDC6 7CCAAA8C218E6AE8 CE6A62CFC23E7218 5B0BDC8E851623E5 12DD8A9DF0BE38CD 08A73AC2337D7869 77404297743327C7 FC4380895E232251 2DDE3988E7601DE3 12ECFFDF2899BD4C
  • Read the ciphertext. Strip whitespace: 1,680 hex characters = 840 bytes = 105 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 26 GUIDs as hex (shown below).

Decrypted: GUID list

  1 2cc976bc-dd73-4a91-b71a-1d13e98d8731
  2 69d0d518-44cc-722e-8e99-fcdf21ac920f
  3 c0837d27-ad9c-77df-a76d-b4ca8ff3ebcb
  4 4276b794-5272-442a-93c8-5b065684a8c3
  5 1d7e3c27-4c6e-0bb8-8308-9ef7f8d1d908
  6 8e3e186e-452c-6d6d-938c-d1c6df670cb2
  7 e2506891-db90-370c-aec7-4f3557a900ff
  8 bba17c32-088a-5dcc-9c72-ec2de05ec621
  9 022a1934-cb6f-550b-839f-06648347ae54
 10 f990b29e-5ee9-64a7-8ec9-7771a2ed7091
 11 4e122ba7-00c4-14e8-bf86-ec5d631339ca
 12 d6b34a95-a001-7e61-8d07-f5444423283f
 13 dd6b4fe8-dbdd-2af3-9862-84b1c1751ea9
 14 894d03b5-32f5-0373-a4ca-a5c7cb95f449
 15 ebc9a079-7bd0-1895-8420-eae6aa93ee38
 16 2893c40c-1bc0-6850-a6cb-b10007640c63
 17 803c0f53-1ea3-7d8f-94ad-0db43c35eab2
 18 618e794d-e373-1800-b89b-6caad4956f40
 19 676b2ca4-e1d2-02a1-be7b-07e5c3035931
 20 9df64cf9-aec7-078f-898c-8b927c98e0e4
 21 3cc933d2-3e92-5a05-b6a3-4a6262521056
 22 4d4264e7-559c-6aca-a125-b75883f954eb
 23 f6926bc1-0340-25ee-bb73-17ed27061a8b
 24 0931f222-0193-0775-9965-3ee368799c02
 25 aabb1979-4a9a-09a8-ab6a-b6542a217fef
 26 3889471a-83d5-5d49-b48c-3f3809f12dfa

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 47740635561720167100562005. Exactly this sequence comes out of new Random(126).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 51 of Run 22 (seed 528,385,484): new Random(528385484), Next(8,64) per post. The RNG predicts N = 26; the post has N = 26 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:02–19:13).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results