A858DE45F56D9BC9 archive

201208142359 y8ssy

explained decrypted manual

Operator test: 62 GUIDs, seed 639. 3DES, key MD5(name+title).

Metadata

Post ID
y8ssy
Title
201208142359 → 2012-08-14 23:59 on A858's clock
Posted (UTC)
2012-08-15 03:59:03
Timezone
UTC−4 · title 23:59 against posted 03:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
3,984 hex characters · 1,992 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208142359) = 8c35c2d22d2c9ed8f044272d5fdd2a21 (name+title)
GUIDs
62
Filler GUID seed
new Random(639).Next(9) ✓ verified
Run
aug13-15-triples (test)
Draw
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listmanualarctic-onlykey: name+titlerun: test

From the post to its content

As posted (encrypted)

99BBE26C91C2A5A4 CDA492C56522C4C3 24906A5DFC0213B0 D886FF87BB025A67 4F2AD1BD8511661F 25E532BF8AE0ABBC 0EF8D5AE80AF56F4 0BF80790B9BBF312 6758404279DB69CF 66E56273C5AB0E2D EEF35F7D28BFB629 12FEA1DCD89446EA 73046FE4835A4185 B1820A3077305178 6D5574BB2922DFA6 A47614706D97405D F3F8F671096592D9 D2A81B8F02996287 EBF95B36CE4825D1 5268E59D2A35200E 269630CC36D6805A B8561B6A4B1CB53C F33A3DAC76A62E70 644CA478D0CB4CF7 33C9EEF12DE1D577 8CC0316F1A53F823 CC87B96EC366D7C3 EDBB277077612337 9C40AD30229F2323 B549E2E5F9ABD3E9 0B2E0BA88918F5C4 A481F4FEBC18C04F 7D13E49EAE7F0E07 A2B821466CDDB84E 176DFA97231FA9D6 E13C65F1B14D6DE7 FB877293B8327617 6E81F73F32FD6CBD F5FEF819A1D70A8E E1A771E3BC3233F1 89B1B77541E2305E 5C62ABC6CE23ECAE 0CEDA699F14F8AAC 2B19B1D97928E0C3 416AE131A91A3D0E F591DB584539BE03 F53FD03C0B54D61D 4EF8F7E6F43EA281 98A029E50EA27B19 9DDCCCB93952873E 173A347362198BED 3063436D51950430 ADFF8193128F92E8 E3FAECCA00FA20E6 D8CDE57C120CC0D4 E6320BAA3A562682 E0A28E400964977D B61CD6F3E5FF71EE 03319B13D48A9AAA 80A4FE5B63B064EE 498581ED1730DECD 696D35DF1D58896C A92A431AC93BDC41 19F8B95C9C336E21 779CBFACEFCBC548 CB95E91D00F9EC0F 5BD888A063168CE7 9E9003C72C7B4EE4 22DF8EFE1EF11189 6C026B39AD9A04C5 1800C289A8DA6110 AD10817699503A98 507BE54D58192C24 93D5B8891A4C3CF3 A757D772933F2ADC E831C00403455D28 3A0B10C8F3EB4C20 4E8210B8F2B83669 28FF2C2C1B15EF42 0CD24484E3877B4D CFDC6806CCCE886F DA5F017231160A4B F05E5FABBB027D2D C04E1FD43738965E F1821A0118FBB23F 658D8E9277E600F8 2688EC9E44DBDECC 00CA2E292C6693AE E6174BEE00273033 2A33BA020D60BF97 F29E9B8A9928E430 5DBEE9AC577EAE3D 15E8CE5BEE350198 F13A2FF4F402F8F3 1CB01F6E79746471 80685065633B8098 B053F6C2F9AE87F5 4E6C49FFF7382FEC E44DE9BFC7E4253F CA8246AAA0996D2D 0DAB0EEBF2A529A6 D2459C5A6F17B6F1 DA773261C1786DE5 484C98B2977CFC4C F63020C07E39EC7A 1055E9830F24962C 26EF78F34F99DA18 C5B1BFF128DC2671 3ACCFEAF313E1C3A FCB6C8A6C9674D61 AF0CDC98DD0C567B C5E9306AB78EAE09 080283797932249F B2574104B73947B7 0B1FCFC9284748B7 4C30EA6B4B9199B9 934184665210F0B6 3D81BEC10278FE1C E1C920C0B2814ACF 810EF6BFCDC4AFAD 168652337ED637FD E2EFCA5D3A50C767 737F9D37AF70D3F7 20D70A19351CEF15 DB73736193D652D7 DA70DEA571A258D5 3EA6A94A3674F5DF 428BAAFC706E5C40 5EECEBA0B1E6290E 06A1D4E1C06C0FDA 89465F2A78499885 229342E6030AF8BE D29F554DABB69CFB 6F20FB1938B1511B 829015B1F24EF7CA 7B44187A6953443D 847CA7285FD5EEBD 3493FD53E1041EBB F636A426A79D18D2 FE2C194697FE0BE5 2FBF80AC574DAE31 A78F0CBB31170F70 BA15DB4F7715FB4A BFE591F21F2FAD74 F7C1ED33BBAF783C 91C5C733D604E78D F83D14FE136B66BF E8EFB82E6A022417 4D46106F80D118C7 38E4DCCBF6725FC9 57D22D7DF82AFA92 F31CF2047AB1B368 867EBD0B6D9C2A42 7ED0B099AB1BBC26 405D38C06904B914 AEB03619F0D5D302 B93DED8C9944056C FBA5D13A084D0C1C AFDD95DF9A2BD224 60357295228B761C 657689BF0DAC1700 9BC1591370D9B7BD F16A9195F39BE0E4 5D36E55B26B9F024 EE7E71CB8F1E7572 B02205EA469EDB4A 2158BF4753C290F3 71BE69EB91EB8892 3FEE70A3F9D8043C E2F5470EE4011856 7518D7462DD8E37D 56BD57F5BFAEF0A2 6C03A8F46DB3C580 E9256D0C4C9116DF B0C324E60EE2143E D3C3562B2962DBAA C804A894C031C9F5 E63325FB4648F703 DC5D66C4D5826441 40AABBDDC3521B97 7F8FFD61BBF80D2F C4EAAF235F8B24D0 5EE469BAB81D4139 63E8D982AA0F05CE 5425A516698D1289 67859894D14E9478 E11A0EC71AC446F5 DAD8895A5E2282B8 13088CC0D8A86059 7DE89C096951D09F 3E4D35ED2A165F12 8F0D707B4A679FEB 45578262E66C1267 1D920F450DC9766A D0CE05FEAA82ACC2 B61B60163C36CF5C 64ECEEA7F7E19AB2 7EC42FA98376DBBE E4B905FAFC53318C 427459862B98296F D0BD10F452B65C51 83A8BCD48E4A8592 1CB3F4C302215023 5071B09D49CD0FDA A57517E4521F4BA1 82ABAA2533C322EA 3AA7BF628A4164F4 A00A028E6716739E 8FBB82BF0883396B 0D5E61D0D60EAF34 7ABFA9ED061C6DA9 9C14F39CE104D743 E7841942B566A8E6 F667ADC9D32E4CC2 1815AF615E39717C BA473ADB24BACD4B DAEA093B3E5D5885 1995C2AB83481D42 6EB46082432B2FDC 3AD62F78EA4A393B 5FD1DD79793CE42F 2822BC8C25151828 511AFDBAB10170A2 40336CA60FF5087B 2F9B54AE46BF4820 3313E67D0A27D0F0 1261FBF64CDCE5D4 CEA0719B507A79C1 E17159D6F5B665D7 6CF70B6E8002009B B06A86A810DCE1F5 0573E8408638FD85 614B244E3F030D21 CF43F74EA2831013 F6E90F9A1421A705 B3297E64C047EA46 F375F5B0EF4E2715 7CEC0034B79D4316 CE0DFD7B9EB67E30 F4C0FEDCB88878CF A51B29ADAF94665C 94FA98E721EF9774 9EB79700304E1330 F8B4494E72FDA681 C551267CEBA7B11B 5B64C7FA5C56F874 B2831761FCA1FE45 94EBC0B570CBD3A6 B91F3034F407FB60
  • Read the ciphertext. Strip whitespace: 3,984 hex characters = 1,992 bytes = 249 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208142359 (name+title). Key = MD5(password) = 8c35c2d22d2c9ed8f044272d5fdd2a21, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 62 GUIDs as hex (shown below).

Decrypted: GUID list

  1 1a000b0a-9e4a-5353-95b4-333605ab159f
  2 55442363-2691-216a-ab96-5a71f24e72d6
  3 1ebe3da3-272a-3706-a69f-0f81d35693b1
  4 2ead82d4-0c1e-893b-984a-e0dec3730393
  5 5af3dcda-c62b-6622-a997-0932839b6441
  6 a2b26e37-9c30-84aa-92b1-1e7f97bc6dfe
  7 969d0b90-e168-158c-838b-10f9b5af77e6
  8 520e54c1-1190-0ff4-91e4-6357760d0989
  9 53f7f5de-83b7-006b-8027-e2480f370316
 10 2dcfcd55-690d-89b1-a1a8-fa702416f5af
 11 3ad8357b-0130-031d-a787-8f4887fe6bb6
 12 af6a2711-e982-3e42-b2bf-af25a33b6d4f
 13 cca2256f-2e1c-8b56-b2b5-9454b82f39fa
 14 63680bca-2e6d-8142-b473-d54ec798f622
 15 bdd701a1-6e3e-2330-8f5f-5f5124b0ebea
 16 2035f32e-4db4-001b-8243-edc56bf54de5
 17 1431dad6-c171-4c7f-8115-03841e75610e
 18 79e01693-71ee-1825-9314-fe7db57a0126
 19 cc07844d-dbcd-88b6-a4af-411c3a97b6d0
 20 6bcf53db-fd7d-6e96-a9fa-0cdf5c4987a7
 21 53f2e7c7-cbaf-6757-9da1-0a552fddb48b
 22 e1ad2933-9d61-5b52-bc97-846c9c4433e2
 23 e6d7d8b4-7cb2-897e-82c7-b0adc6dadb83
 24 2228ff3f-a87c-2d8b-ba53-4b537127aecf
 25 02cf4c1d-99aa-28e9-a0d5-835e19059de3
 26 566b69fe-588f-4d3b-8172-419f0be3c3cb
 27 e0586722-90dc-2743-91d9-b6ef2c625d94
 28 8ec6ee77-bc27-52a8-af53-c608a9a1b161
 29 ead9e3e9-dc89-00e7-bdf3-de9f31dfcbd2
 30 8fc101c7-3b39-627a-a3fc-7493cc0df57f
 31 18c55b16-50e0-001e-85c9-e46810bd28b1
 32 95e3beed-7731-6d67-a92d-1698b39da34c
 33 10d222de-7930-24d7-a871-6410f119927c
 34 6d1e6f6c-9dec-0237-ab73-26a25c72f047
 35 83db9072-c7fc-6880-8d40-0eb02fd7f9bb
 36 133efde1-2dce-4edd-a7e5-495f01100c43
 37 eb5a05ca-b1f6-3946-840c-f1f9d17a9eef
 38 b0c8b905-c182-706d-a6af-6a5798d6c3a5
 39 ada36904-94ac-63bc-be80-259323f0ded0
 40 24193e27-af64-7ac2-a5ef-0c79a9231047
 41 f9773ba8-b3ea-0328-a726-5ca15fc1e777
 42 b5cbdfe3-4bc0-2b46-baf3-d7aeac36737a
 43 4d49d081-0ca3-6346-ab7d-6b99dc8a50f7
 44 80740d00-1c27-531b-b90c-4673de6e4b47
 45 a34f3f84-1ff4-75e8-9e5e-2430e26f015d
 46 0a69f1f9-b08b-4840-9b06-4cb88f1f43bb
 47 95fe1bcb-2098-6dc1-88a9-b938f4772b3b
 48 df9d0bba-06e3-40cf-a151-0fb7134c5962
 49 89d52f24-21b2-5f15-b202-99cebe48349b
 50 82ffc428-8981-6b1f-ac37-33f2fcb1e499
 51 4acdac16-3e4c-5397-b8b1-3dd19febebdf
 52 4f5c8026-f182-658d-9210-0a3f148e4ffc
 53 dac916e0-1859-079c-9e12-6ad8253dbb7e
 54 b6a7c93d-6886-6aa5-8240-67dba7a460cf
 55 4b1ae1fd-a3ff-10b4-8d85-d2beb6ddc259
 56 b9f533eb-4c01-80e5-b2a8-2ef1e253e1bc
 57 9c689e5d-9d4b-2096-be44-e0597afe60d0
 58 e4e2d558-843c-18a5-abea-23fc0bea6e30
 59 1a738175-47c7-579c-9426-b20ca77832e9
 60 5d84103e-f853-1cda-b7dc-075f04792d2f
 61 bcccda22-8490-56fc-90b2-0b6c6e2b3a34
 62 064f67ce-b77d-5d2b-9123-99d09698cb56

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 52386810080388204186658224250606206437670265746456560618215155. Exactly this sequence comes out of new Random(639).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. Grouped in aug13-15-triples: three 3-post bursts 1 min apart with title zones +9 / +4.5 / -4 around the 2012-08-13/14 machine/clock change (clock lead +150 s -> -1 s between them): operator setting tests
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Solution summary

Method
MD5(name+title) ECB
Result
3DES(name+title) ECB, 62 GUIDs, seed 639
Explanation
Pre-cutover filler under MD5(name+title) ECB: three 3-post bursts 1 min apart with title zones +9 / +4.5 / -4 around the 2012-08-13/14 machine/clock change (clock lead +150 s -> -1 s between them): operator setting tests; list seed 639 from the GUID masks (3DES(name+title) ECB, 62 GUIDs, seed 639)

Related

Findings: Mask digit · Count RNG & runs