A858DE45F56D9BC9 archive

201208151718 ya6yg

explained decrypted filler

3DES(name+title) ECB, 35 GUIDs, seed 108

Metadata

Post ID
ya6yg
Title
201208151718 → 2012-08-15 17:18 on A858's clock
Posted (UTC)
2012-08-15 21:18:01
Timezone
UTC−4 · title 17:18 against posted 21:18 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,256 hex characters · 1,128 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208151718) = 2f2095debd3e2e18ea2f84d91950c671 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
35
Filler GUID seed
new Random(108).Next(9) ✓ verified
Run
Run 24 (seed 39,416,093) (seed)
Draw
0 · predicted N = 35 ✓
Machine boot
2012-08-15 10:18–10:21 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

DBB993F09F55AA5B BC201BDFE31AF890 017E40D265FB62F3 4A70EF5C0FA940AF 09FA57D8A71835EF 11306929AD0A4C24 0BA15EB057BEB682 98DD5EB64056F1E1 BA9DF2A36F879E78 967A0C1E0ECD984D EC7D3CF02E3587C2 8041998881749CFC 8E094A97AACBD695 B22EF49B3DCC9F65 A67BCA5F27274247 D183E70DC51C02B0 1CDE3868732ADA5E A272676FB9EEC955 C9ECAEECB511F9D9 8B06C5439B666FEA D70F672A3F43AF60 EC03E9264D984FE5 D4FAFBE164964405 DD2C42F7DCA0566C 2FD85AED05EED116 09DB5686571A618F AACDF5DF27E0666D 48338C2F04F4FC84 92CE96E678FA4CF7 E908A1DD1E94F578 60A62303E1C1F1AA 24F233156E2F7D79 C122FEBDE72C54E3 07FA70D33B3F07A6 D56ABCE908989070 F794C3D25D0726E8 E88609CE325FFD10 7CEE875911AC6681 9D289D9D41AEDA88 CDD348478B807662 AA2449AB88946555 849DB98034E1CCB8 CB71A80F3E109749 0245B091CCCDD05F DF1550F7A34C920D 72E69D2F4C54B393 3EEB0483DF08108A 15B46B2A8F990E88 9513DB2E3FE9AD84 08008FA83444DEF2 5B4D1D41B7B50150 A663423FEEE3784C 8221675E38688E98 F746FECC52FC239B A84D13E3E70BA2CF 0A2816026DAEC29B 611A271B1860063E 2CE3B5FF4B2679EA A3BE0FF3B95EF993 C2E3D1FC87025629 4E4B8E9CF6F5E3C2 9DFCBFED715ED810 C4E0F3D0CD34F066 5F7E724325CE7D81 4D6E001A9448A20E F47555DDB0618FE0 3F7EBEA389749E09 7D2F3359ED2328B2 58F23760E37BE3FA 6B4259954801139A 0677F82A7537D9B5 0B3009B760A7BCD9 6BC869B267B737B3 095EA368A1AE66BF 208F510E1237CB64 FFC132B79C7EBA41 60BF7249C752FCF7 F86EE9103230468F 95F2FCECA0316509 4D51F886F9D293A5 5FB21420B8E7D2F0 AC460B60803FC078 7270BCF1ED9D7E37 7C453DD7D7B54185 3E723A4CBCD1EB13 D972A3AF93D2ED9E F5368DA2D91E7777 F8ECF9AB4DF43204 3CF1D547771D09DE 24988C157CD02BE0 7A0B6B038556518F A8684523C045092C FCDC259B26A0E1E9 3CEED944A175B54E 2CB85A82B8EBE67B CCD7F27AD1B203CF 79EC99C860837DCF 7D02A095B6A13C61 F711AEC8CC0FEF7E D18EDD8895482524 81B1C5357397B566 8A3840A5AC1008AA 7EC3FC454671F1E1 50FBEC840FEB885F C7C4859ED271B044 67E3FC8EC5097E56 045461DAA765CF37 8236036D5BFC175D 214990741173A49E 7F3616B7324349C7 03BB68786466F4BB E08DBFFD74BB1E42 8940A4DE2EF0F2DE 84360FC47A4A4302 E089D1ABB3A0D04B 297C01F856B18621 10EEE2C5AA0A035A AC0763275406699A 32A2E2639A0570CE C11B992E39268A7D 120D50396158A289 DA55A8389E4ACF6C 1E7D1B2F1B0090E4 5933056059E5F98E 171020466F35EF88 B74275F28045CC4F 0F897122C1A5499D 95E1F06643E9C710 8BA8D8DD4E5B7F3A 10E698B882B3FECF A3BA9A06D4CEF04D 9A24700C9DA64C26 9314FA41C4681AF5 76C625BD7BE5EF71 CD1A27896408ECB1 6979E579F9CD6A91 2BECCD8DDB59FF71 37DE2622BF4ACB66 2C0500F62E379A61 82D5E224F79D32A3 F061692683E166DB
  • Read the ciphertext. Strip whitespace: 2,256 hex characters = 1,128 bytes = 141 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208151718 (name+title). Key = MD5(password) = 2f2095debd3e2e18ea2f84d91950c671, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 35 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c8fe545c-ae82-1dbb-80b4-e94668a9ea83
  2 1f92d455-6bf7-4a25-bb7b-3d05cb68edbe
  3 0fe80011-a662-2c73-a336-b96150138ea2
  4 1d17781e-ada5-5e10-9085-cdc7d4ea4c4a
  5 cb6e07d7-b8a6-858d-a5df-b20bad7e8ae2
  6 af12d47c-6c1b-80e1-bf91-b64162092294
  7 5fae264a-ba08-24bc-a350-0be9b33426e6
  8 5c74e6a6-d15a-5963-85f2-c7782017ca47
  9 e635ed36-57d8-39de-8bd0-a977afd7d79b
 10 d9e7bce2-453e-0e64-85d4-4723d883267c
 11 53007654-2a6d-7563-99dd-0e34191cb427
 12 42c0083b-b8a5-7ef5-af2f-2edda8d9273e
 13 b5ef7021-3303-7d1e-9116-83d533c6320b
 14 21ba85f6-c07c-5469-a0f8-5f5370db58da
 15 ca779e57-a9fb-53ba-8c68-59d8ff23b5d2
 16 3e98f55c-ae37-405e-8146-2f59b9b4f5b3
 17 4b1bc715-665b-2e06-8bc2-c97cd9cacd6e
 18 5f64f3bd-d123-89fb-8a7f-beee5b6fb32b
 19 0f7a5797-a912-5b5f-9d67-93bcc8d480d2
 20 11465add-1672-141a-9fa7-f34ab20e0cad
 21 b7f13e68-cc62-1acd-a2b7-925a1579eee3
 22 08de55f5-b101-3613-a19a-43d63426c794
 23 49c543ce-27e4-2d43-bee9-649d2d072396
 24 27f30acc-b564-6547-a691-11107c516595
 25 86fa0724-593c-2615-8a4d-5f758085310e
 26 c580cb2e-d4f9-82c7-83a4-dfe9601a9c1e
 27 28dd72ec-bf97-744f-bc58-3d3835700cf5
 28 edd4c505-85d3-5f2c-a75b-aad044518b13
 29 2a22c656-c8a7-36bd-b666-3db2475f8a6c
 30 c516316e-bbe7-0672-864f-71eb7cfbb7a0
 31 5920f7f2-f359-00b6-98b5-48ea807d2ba1
 32 6a0f80eb-ff70-860c-80ad-cfb7898cb718
 33 d0ed66e5-ea9c-687e-8d07-8282358139e1
 34 dec05ded-8fe4-6928-bec1-294e9c284941
 35 2de3514b-ac66-3d37-bead-5d4d2a2acffc

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 14258825307775542851132628753008663. Exactly this sequence comes out of new Random(108).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 0 of Run 24 (seed 39,416,093): new Random(39416093), Next(8,64) per post. The RNG predicts N = 35; the post has N = 35 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results