A858DE45F56D9BC9 archive

201208112320 y2tga

explained decrypted filler

3DES(name+name) ECB, 41 GUIDs, seed 673

Metadata

Post ID
y2tga
Title
201208112320 → 2012-08-11 23:20 on A858's clock
Posted (UTC)
2012-08-12 03:17:44
Timezone
UTC−4 · title 23:20 against posted 03:17 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,640 hex characters · 1,320 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
41
Filler GUID seed
new Random(673).Next(9) ✓ verified
Run
Run 22 (seed 528,385,484) (seed)
Draw
64 · predicted N = 41 ✓
Machine boot
2012-07-27 19:02–19:13 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+namerun: seed

From the post to its content

As posted (encrypted)

7587D012F60F91AF 67608F38A82BED10 ACAD5D2A9E3690D2 49AC3BB210E64DC8 D9E653A54FA28D7E 7A88080569487178 0A130EE6BF04DAF6 C2AAC54C1A2CD186 D265EA69FC3893FA BECE270AA40F2AE1 C8F14A81517AEB32 5F3CD9EA10418290 1302489CB484BDC1 E195CB69044ED6DC 01389066D507E92D E5BE194827BF3785 2E204562B7163C45 9904E84879A340A7 33A4FE48E4CCB66A 06F0F7CAC23E7F4E 2A6F134304427AF8 A9F2A639B72E8649 B738F0039A77EF1A F5D5CD48D3338ACA 58938E69AE6EF136 D61E6C26C6CA638A 04A44D36778B5D8C CE761F5AB5C962D7 2B2EE8165E944DE8 AB1A91A0FB8FCD35 AA8E34598C1450FF 0712E5557A406607 556AFE59174D926F 59ADC26541085B5E C3E335ADF309C670 BC6C2BFBAC4B67BA 4B508CD1422FDCA0 FD7622A5A015F525 8193A73D2FFAB585 5C47A3D80182C6C4 9D802BE060E69598 F41677AFAFBE21AB 32810D5660204A5E E6071160A796A790 A46BB46D5640EA1B B4813B3CFAFDBA6A D79D418DFB4BDF6D CB074F902896450A 8DD166BFEC6E5771 619289EECA14451D 370646230BC702EF AF2BF4C317D80430 7FA379AF65549C29 FA04B3692648A070 C599378037028A6D 901CC1B7556CD0A3 32743310429CFCC2 D1D0F532E1DABEDA 37346E5A725014AA 55646DDE56444EA3 343382B1E63CD34D D3FC9A0982784A1E BBA966388524AC5B 785FE42BE58503B1 31AB47983385F0A5 30AE995B7367236B 99E84CC7DB9ACF80 C99BEF049BC5F82B 62E3685B00995F4E 97BDDE911251CA28 81FC98D0626302AC 7B2AB66C3D7EC07A 1BFD470D54E7CB4F BE3495286F3C8CFF E9DBF8BFEADABD83 27A0F798358690D1 4E4DAD4DC537B82C 2272BFC9B2030BBF 9FC5A4E9B4F95CA8 619352F59EE4CFD5 A0DEC52BD8FD54DC C20BF242A85E4E65 CEF84A33AFD5BB1D BBFC7837D41C448A 76BC052DC1918BF6 0B6BFB28656F0982 8B692E3D0F1056AB B1014BEE905329FD B8A77ABC6C17A632 D3880BE8D336096E 5B5688A9B38FE62A 262C7B8238F4390A 03DCA0A63669A4BB 544F74D7FD410839 B85F6B2BB70B38CB 7479D95498E2EC2B EA32A70155D399F5 A0C188F3FF459497 9F69D4F865A8EA99 6D5656761154BD7D 5FF1A61956EB8496 9452AD6FCABD3725 9F558C5942368BDB 072C69BF2D55DF05 E6A1BE0FAC4331A0 7612368A892ECE92 02725A08CF949117 6191AB31E7D662B9 A4B2EF7A9C77DBFD 8AE1AAC6A6F30E23 697F4F298E70FAED 2AC2B0D0BB57FBF7 D6525D0C5F26E5AD 55D38AEACD2C7734 66E648AA84B494AE ECA1895D6A154978 31D0140A3193A7D7 16D7BA8FF95510C3 131ACA57400D6CA5 9C60AF7D76AC80FE 5F09E1F4DD379CC2 3230437DAA890B52 30E045434B69F3F3 FC27BA831441F281 BC123CBD98C31B26 8CE3F5132AA9ED3D AB08A61DBE0F38FF 40D6A741FCEBA6F3 E3B283CB1C31A282 0286CAC6E1890665 C2DA025657CA4B75 F4B304DCBADF895B BAC18DC817A3B95B 24FD5C1413887E87 441EFA4479E7AA7F 7BDB3E03E8A850B6 3A0B88598A2E2B5C 30ED199F0DB56065 CD64A8653C463F23 A304CD9C8F299E52 48EA0279B148E5EC 6FAEF8CE7DB46352 387774DD63BE0376 0C6A996624B8D8E5 DF1B6E69B270F639 1119C86A53B1CD42 7FF923CED8EF90D2 0B6314EEF6561298 F5BCF370E0E1D6AF EABF3A499DE00C18 8FE6424EADD9CE13 3292AB3021DC6ED7 9D3BA9A4C8D46CF1 67C5C4728DB2704F 9EF888C48C97F3E4 59F31AA7287087D5 8AEC1A341D2BD160 C165C74EBBA133B8 67957493DF537757 49AB533366989ADA 2949FB5431F8A4F3 ECC78DA3D42C7F85 AC668F1C29932D8C DFE5A32CD7206D66 12ECFFDF2899BD4C
  • Read the ciphertext. Strip whitespace: 2,640 hex characters = 1,320 bytes = 165 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 41 GUIDs as hex (shown below).

Decrypted: GUID list

  1 706f00f7-2410-24e2-a633-b76cea2f2753
  2 52dfd972-a2d5-2f23-b106-0b2f3e733123
  3 1bcbeb38-e0b5-1fd8-b1bd-0c39ae19881c
  4 3823bb04-bec8-1664-9cf7-0ce7993215ef
  5 a7dd69d3-36ce-02b7-8d67-0b3aed6b5f2a
  6 832a088a-e2dc-6e38-a86c-e7cbb0cb1273
  7 3eb6af61-ac07-4821-b827-c9a9f99580dc
  8 07d85960-e293-0d16-8b33-b4fa00554a35
  9 7b4255f3-683c-2e66-9946-ddf9e8856c6a
 10 983e1f74-d1b8-3593-a0f1-7fec40ee9afa
 11 b0a5fb51-e766-1eb0-bca3-2dedb9fba98f
 12 cacbcb7f-ea7f-78b3-b6cf-dd6a17fc5256
 13 03713abf-1641-296c-acc2-a6dc380562a1
 14 b7364446-8c9b-527d-9a36-bce126d4de9f
 15 bc0e972a-2277-0565-9e2f-95bd861afb13
 16 bc638e9b-4c80-2289-809e-9812a5fcf8f5
 17 213850db-34a1-659f-bf78-32373d15e232
 18 ff3db593-de2c-2ea6-806a-97e23251e1e0
 19 94f32ad2-374d-81bd-a717-dffde6df2eff
 20 eca456e9-be0c-8d67-9128-65bc00bc66f2
 21 25ece088-5508-2d3b-bf46-778820755d2f
 22 bdb11899-29a0-86b9-a5d8-12238dd769d5
 23 807e2501-ac78-6837-9ad7-c56dc5a1c7cc
 24 de4ac657-ffed-1a27-9dee-925f0681e562
 25 f92a6160-0c95-5bda-a4ae-4101980f04f4
 26 2e673eb3-38e1-3c3d-b7d7-2cb3a93117c3
 27 db884d27-7001-586c-a50a-666663200a98
 28 f5e32b62-7d3c-674e-8b51-bf94985958ce
 29 c2ff8628-945e-3dd2-889e-8e7fe3ddd672
 30 1bd95a7c-85f9-0fa8-87d5-cbb654b04fa0
 31 904ccc7c-5ba0-50d5-b901-c12891924e6e
 32 f1e3c666-0e76-6bdb-89e5-2760f2cf775d
 33 22c5ecf3-e125-87dd-b02f-a58639816812
 34 7ebbca40-a97a-76e2-9a52-f0d94616b56c
 35 e042dabb-5075-5e40-8da9-283980e171b9
 36 afb1c8d5-07bc-820a-9400-123df82dfbf3
 37 36de8bd6-61a8-4af8-8ee8-afcdc46c0211
 38 e9aadaab-e021-0350-a9cd-d64587a70693
 39 c3e1a36c-f9a6-56dd-b0ee-8fd24cb0ee74
 40 afac4bce-3888-05a2-9de1-0fe1bf76b928
 41 0244581f-e195-1305-8a44-d37cb72b5bd6

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 22110640231725026288286153563056875840501. Exactly this sequence comes out of new Random(673).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 64 of Run 22 (seed 528,385,484): new Random(528385484), Next(8,64) per post. The RNG predicts N = 41; the post has N = 41 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:02–19:13).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results