A858DE45F56D9BC9 archive

201208140339 y5nqk

explained decrypted manual

Operator test: 51 GUIDs, seed 3. 3DES, key MD5(name+name).

Metadata

Post ID
y5nqk
Title
201208140339 → 2012-08-14 03:39 on A858's clock
Posted (UTC)
2012-08-13 18:36:25
Timezone
UTC+9 · title 03:39 against posted 18:36 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
3,280 hex characters · 1,640 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
GUIDs
51
Filler GUID seed
new Random(3).Next(9) ✓ verified
Run
aug13-15-triples (test)
Draw
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 2
Tags
automated (decryptable)2012Encrypted masked GUID listmanualarctic-onlykey: name+namerun: test

From the post to its content

As posted (encrypted)

FC2AD3B60C0531E4 1FA9216F567527CE CC5AF8245925B83F 1C52882D2FA87EF1 9FFD1FAE1C36D815 5455159F107EFD74 A365DE777607EF55 DB18C246D61787AB 3FF1B289F3AC13D4 71A41DF3E44FB415 7D4329F5A073DAC6 E9F96B497EFC75B7 B24F3DE388D2637A D4CC6698527D56BC 859F5571005CFE07 E06361C462D29F8A D9DCCD213B6280C8 0FA76683678C51C1 9A2867DDEE0DFC93 C31CAF527ADC83B4 D0BA3311D5F882BB 4386AE0CCA01FEFC D66FEA554D3CE136 025DF9528A624E6B E4592BC9046D3AED 79AAA5CF7A610ECB BEB5836F70A022EB C74ECB14FB6AA90A 3029F0C37DDCD188 77E4BD0688E46C32 18E4977E534F105B 4091ECB34347AD60 1C68316914939605 C5F588C55E845D3E 48C026CA57E4BAD4 EF7193DF1A37A3B3 43849A65031B1C26 CB5AE51025E5F775 F1930AA103AD2914 8B4BBD8414AE6FD9 7B0EA66F2E18B76A 549671C21C176BD0 0672C00BC596DFCF 6B81FAD302983CC3 5C8087F76B879BC1 0D6FB359E40E7013 A5956A337F4FB6F0 2D583E421787FB61 3A65B38C20EC90A0 23F0425CC2847AA8 FC22D3957485ECE4 4C920DD4BA61672A A781E0C4514ECF9E DB079E6685DFF0AB 9B943059CDF73402 86D702E05B0EA2BE 66773FE53A2D77AF C417F8277BC5411A 508F5B2E7CA18BEB 4CD7612D095722BC BC4F0AE9C4DB8CB1 7FFB825D2CB090BD 55320C62B8BCAD56 30BA42EF60DD7B02 8BD213B102195A62 7844987B6279430E 24F8F5EDDE5B0135 706EA5D8DCB7D604 5381275676A82E02 DD2A812E81B61DAA A109D3EB6168A6A8 50C29FDFD93A2492 27CDF2C1A5F20F39 A212FB9FF7E17765 2F4EB00C946F5809 09693E45D755FC0F 458F80C6147AC4F3 55B9155E6A47BB71 D91E5A7A5FBE1E8A 1A804A42B4EC98E3 C5EB417E836C184B 0D980AB24A56FABD BFDE7B82673FF90F 54929312E7A28B52 275F3564FDD9E585 722468493F5AF686 803D390C125537E5 1E435111554C6585 6288634ECFCC24F1 CEC38E5F5301CAF2 7ADA0359D374C1F7 6F2E4C4EE893CC53 6F05F6E99B9DB76B 52440CABE38B20D3 928C5DC5F09AEB7F BBFE4FDCAB4E0D55 BC3263D972DECA42 EA9116DB48E0D717 DCEC0BA6FF358522 C95705C8741527FE EB225CEDAC109AA2 7D6A196E9B0FC13C 8948F6C293C3D42A E51D3622D7CA0320 D2EEC0D3C9F67C4E 808F75FA93D781DC CD0F88786232B980 F7684D4BA7D628D2 620CC4CC0408DDBF 7A89840CE25C7A1A 6485A312E78546D0 4354124B8A283BD9 2EA4726271CE4D03 5A24750230F77234 DA21CEF7CEE7DF09 1AE949B0B0E1588B C72ABC0C6EDCA055 DD8EE4EBB0C24C07 5FD539CCF8605FB9 C71C6D70F3E65D86 60BF1D15FA862765 E0A5608615EB035A AE9F98091562EF47 4B3656668675447A D0A49B114FBD5130 A177C814598B98CF 3CDD20836699CE03 565A4C117F87DEC3 E376169C053343AA E8F872CFA73C4042 2B6E337BC12A0D37 FC40398AE7D16DFB 803A14D261C04F24 95FD972B72F9F824 EDF7CF1026FB6A4E 5AACF435D59997C6 C90961FC11459151 F23A2840DC8B1ADC 3BA7F6B03CC50934 7B44E2BFE19CE305 9FB93649184F0895 302DAEAD6C8D4EB9 6E8CD19408DBC18F C7F0743DF5833273 68F010D58A698767 6A57531EE2C91C49 C35BB745178A04EB 6121E69804052ADB BA27F1DCCE7F2BB9 0DB59BE3ECEDB732 7921B81269EA2EE4 F7832C01605F010A A5ADA01C339C00F1 87C5BEFD377119C1 E113E9AE7D6EE9B1 0DA389310EDE5373 637C4090F2BBC47D ACE5473B13DB7A5E 2B846A0AA07B3CA3 5B6DE7D6A64445E7 F58C07B85386BF44 DBB6AFB0E3BEFCA7 9AF2B2BBEDDDEE39 1BC41C80021237A8 5EA16C0FF3F84602 1AD7E0223F679F8F DDAC3C04DB6D02C7 5168B9AC394D1C55 2CA139408D3E70D9 54DF48679149F0B9 41A6DB7641B9030D FDBC54046EEAC9C9 909758B4779DAA57 5299D57E4DD47058 80F9AD0847A51206 68E70B24CFE11737 2C65D0D7D54B5436 8D72F78FB800E272 BBB41CFB9222A8F4 F352C946937A35C7 57E477E789663AA0 C92BA2586A15C518 39C130C8E6CF09CE A20A8C5BBEB96AB3 A2D360DAF5CEB12F 2FE797847DB440A8 F3FC2D7A98938BD4 7EB5730B764C4F73 E971CEDC9B02E805 8AFBD4120B576837 86D871BE6CDEB5A9 14AD8BF3C1BD815A 5D9F612A965AAA16 6A4CB7739D405952 FA38840B408E04DE D2DD3E15285343CD E66B686595B0A417 F64C4C2A57ACA226 1215F763E930CDA7 862EACF83EAC3B38 25701C8A0CF6C401 9C216053A58D51B4 35A25FED8E9B4930 5F629D6226F02E4F 12ECFFDF2899BD4C
  • Read the ciphertext. Strip whitespace: 3,280 hex characters = 1,640 bytes = 205 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 51 GUIDs as hex (shown below).

Decrypted: GUID list

  1 07602b1d-7dca-21a4-bf29-98b2a476becb
  2 bea07782-a924-6601-89fd-f9da390efba3
  3 15f0d3ec-c535-7138-8991-4cb002326a07
  4 ffa5c83a-af29-1d69-8357-22857e1da0a4
  5 85358cda-5be8-53e0-9e0b-036822dd5934
  6 1ae33945-4516-1e4c-a8aa-3653ecb639a5
  7 07404bb3-c4a8-2715-b298-ca3934c82504
  8 3c97e07f-b69d-8deb-8341-5cfebbbf16f1
  9 4728d072-071d-391a-991f-b0c09280574e
 10 3c10fb28-6674-359b-b901-1b35fb8fbe6d
 11 e7242f0f-6346-42b4-9736-15852166bb3e
 12 7cc1fd95-70e1-704f-bd7d-8a86ffca615d
 13 74166f9b-4972-64ea-a441-1ba41a680327
 14 a22e3429-bc3e-0c8e-87d1-19472d87fb0f
 15 2445fb31-d3d6-0ee5-b255-7e6acead570e
 16 6f7b1145-8a12-834a-9bc4-58a5269688e8
 17 4f28c5ea-c531-1515-9526-ea14ed0bde6b
 18 e2113d47-20bd-72f8-b30b-f439f7323879
 19 0c82c8ed-f544-6eb3-aade-38b0a7919478
 20 eb10a5ec-1a03-4cc3-a79d-d1205310eedc
 21 922739b1-e015-1221-839d-d173bb86a65d
 22 915b06aa-45a0-5240-b93b-2dfefef488e4
 23 8f25209a-2352-4f7e-9684-3b351fd0f70b
 24 91e7da8e-5eb0-020b-b8e0-f8f79ae801e5
 25 53e9c3f6-c72a-8328-8898-15d5b15c8379
 26 0e5b9989-3fc4-4a61-9641-1f4ffa3e203a
 27 53a482da-6522-4598-9573-9c826ad153c0
 28 e10892cc-c6c3-4730-8fcc-3c4a66b553f1
 29 2b051c4e-4d31-35d4-8b57-09e1b518f5e5
 30 94bad570-6e92-4e14-b4bc-71786c8d0bba
 31 35070b24-a4df-249d-bb12-dafd9a7e62b2
 32 eaef6a88-2407-274b-aa25-0685f0e0ef9c
 33 9e46b8e0-0155-4e13-bd20-1dc7d0fe8b69
 34 b679e68a-4aac-0f32-9d35-6f3ccdef0a05
 35 a88dc38a-867b-60aa-a636-11f12a758071
 36 4117a0d9-c56d-8286-ba5c-ff5e477c071f
 37 fcfcd057-470f-4899-96b4-47406cb329b1
 38 3714bb2c-1afd-31da-b54c-6de33d685372
 39 3ab20614-48f1-71be-8392-d7eaae6957e0
 40 f16ded5d-9cfc-5827-b22c-4114e05950b3
 41 de9dec4f-0713-75ac-8f2c-52fef12028c0
 42 f9691ab0-4f4c-4873-a531-e2ac1ac97f01
 43 2e9ededa-2a90-721c-adc4-ab6a47140f4c
 44 8a09c76b-9aeb-5620-8219-00f16ebd700b
 45 ee62a595-a721-4d66-8a7b-47a03952f6c9
 46 8e522b76-5d3d-3f0f-97d3-ae675efd4fe0
 47 29ca1293-0dbe-3407-bbcd-58b4b1dff2ea
 48 5b6fca90-70fc-452e-b394-0d534b32d757
 49 cb630007-0cf3-3256-8770-3547a934661f
 50 e1719682-91f8-5e15-938f-9ee77d7937e4
 51 25c98431-c9dd-6088-a9fe-2a0feb4ca9f0

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 267151283347600817641540844434224068437574754334356. Exactly this sequence comes out of new Random(3).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. Grouped in aug13-15-triples: three 3-post bursts 1 min apart with title zones +9 / +4.5 / -4 around the 2012-08-13/14 machine/clock change (clock lead +150 s -> -1 s between them): operator setting tests
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Solution summary

Method
MD5(name+name) ECB
Result
3DES(name+name) ECB, 51 GUIDs, seed 3
Explanation
Pre-cutover filler under MD5(name+name) ECB: three 3-post bursts 1 min apart with title zones +9 / +4.5 / -4 around the 2012-08-13/14 machine/clock change (clock lead +150 s -> -1 s between them): operator setting tests; list seed 3 from the GUID masks (3DES(name+name) ECB, 51 GUIDs, seed 3)

Related

Findings: Mask digit · Count RNG & runs