A858DE45F56D9BC9 archive

201208151720 ya73v

explained decrypted filler

3DES(name+title) ECB, 30 GUIDs, seed 745

Metadata

Post ID
ya73v
Title
201208151720 → 2012-08-15 17:20 on A858's clock
Posted (UTC)
2012-08-15 21:20:04
Timezone
UTC−4 · title 17:20 against posted 21:20 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,936 hex characters · 968 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208151720) = 87fdc5ef3fcef6a96f3a97459b56ac56 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
30
Filler GUID seed
new Random(745).Next(9) ✓ verified
Run
Run 24 (seed 39,416,093) (seed)
Draw
2 · predicted N = 30 ✓
Machine boot
2012-08-15 10:18–10:21 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

6094FC39CC1B5C03 E06FC633165776A0 41C722708FFEFFD2 389A0D52EBFA95C9 0239F6158FA6EAA0 37793352F6F0685A 23BF6BD208FD2666 97B7BB4B875FA65C 7928E167B42B18EB 883C9E477F4E394D 81DABFCA0F791943 F9D7C9C85AF62FCF E45E145D2AE97C1C A2671B09E10349AB D1C0D2D551F19670 C5A1E37D3D44C49D F4DBA3CA7DA783DF EC7F5AF9543E5B0A ADDF17C7A1F026A6 33D26A3DE790EBA5 CC4A3260596598A2 4F0B9F500C095EEC A4BD7F77E213B76D 766917939E8A9208 71E31575B0929BCC 681C8C6D125541EF 2D1B3CE11E6D33F1 5F8DD2729149977F 885C1B476ACEE702 E27490BED5182304 9F1BF08A8B65B555 7A15CE0C20C76A37 C85203D8F85D30F9 7AAA3F6B79122DA9 2703E25EC6AE3080 355A88EA962DEFC9 8BD6CB0B07306B11 B98100A6A4312DDC F660E235A6546755 B7FB287805117154 E347DE25EF1E0506 C67285758F63A7E5 9B5EF9E7DB7878F2 AD4B1FA8D19C19CB A8CEB1878D318500 CB2C4E7172B31297 4B12A165C26B2B60 BF22F1AC52DF2909 48B04EA6A688CC65 19C8DDA1D180ECE3 DB12216DEB72663D ABF27BFB2D0442FA 3E7454FE68720589 3C2A56343490CA9E 5A96DE27C029734D F366683FECFF1597 89BBAA0F88D1B2EC EC0792A0E630CB03 4C16A19B5501296E BE0BC088AF19C909 7DF79D029190B5D2 11D748FD8812995B EAD81DA4A455CF73 48F53C6C552C1525 B0D984F7D5E86A6E E682F38A5DCB4C01 9014557811EBFC85 EE000F927F604FB3 287C67411A14D1B0 4251D87A807361F5 47428BACACBB46FC 937EA03663DC4107 09146FA258EFFFB1 2489B42DC2828734 E32CC27A5CA01291 B679B6FF26C59008 CCB5609FBAD81301 5ACED5BADA3CBB1D DA34E9CC28DB8F6A EDEAD99C99008A63 85B781E3A2299FE0 D6AC5735FAF4980B BDF944B817353067 0691A01DC1B598E5 50826ABBC7E3A391 244C750A467CF122 E74F6CC06A704E02 265E5E9BCE5875D6 BB136B5DCA2781E2 4EB83543A18D843A CE5355EA592C54D8 197CA36B96E567B7 ADA9CB9228CD4812 197BCE85640B3729 F06D2EB19C53C195 19EBD47DCC89BF1C 0F9D2AB3B5128C19 1765803EBFA108B5 987935A29887FF84 30728035A25F28EC 64BD3DAA4E763989 A92D82FDDB11F118 BC30BA9B9D4C670A E7263DFCF635F597 123D7E4243A69E9D ABED32AAA4344B4B 36312E046105CFC8 DDC2DA3A7A762DB3 3EF5251AAD614D09 546EB9BEEF6CC334 48926A74C9E9AD32 3FA87DF024B78BBD 668C715D77147329 D9AEC6017ACD1F5C D28D9C2A1082120D B922468CF107EC90 2B64CCF322363EFE A33047E3CEDE4123 77D58D5370C38668 268D98FCDEFBCFD5 CBD9C48141CEF4B4
  • Read the ciphertext. Strip whitespace: 1,936 hex characters = 968 bytes = 121 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208151720 (name+title). Key = MD5(password) = 87fdc5ef3fcef6a96f3a97459b56ac56, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 30 GUIDs as hex (shown below).

Decrypted: GUID list

  1 6b96f6d4-b7c2-8a5e-aec7-96ea7c663c76
  2 0a00be24-e5bc-374c-9cdc-d1ec7a1ea7ed
  3 6cd60378-e29b-42e7-bcdb-8a6bcc47c6a4
  4 298736bd-5e30-5956-98c4-a300db6fb110
  5 c7ec5fb5-454b-5033-a7cb-f3202ca8dd30
  6 b9515c74-e3a3-5130-a0f2-0ce154b07e16
  7 c4488c6f-1f7e-659b-9b18-9a4019fc2225
  8 66de45c1-f6e7-1880-b297-a7d72cffac0c
  9 96a35562-28e6-1843-9aff-afed13239079
 10 eac2df20-0956-8e47-a61b-59d95895f07d
 11 1ff22605-4782-1387-b647-a2c15d160bbc
 12 52d9e9f4-5292-0460-a598-66e4fc605b31
 13 23cb2728-41c8-734d-8764-6d13f49e0205
 14 d0305998-ad7a-06e2-9f74-7f9310566d41
 15 b64f69c1-de3f-48d4-abc2-1f00aa859517
 16 267489f2-01a2-28b1-bc7a-b542b321e9da
 17 061335d5-3e0d-076d-89a3-1ac7332e5b59
 18 14a04dbc-0081-80f7-a005-abbba7f65e97
 19 f93e6e30-2049-7748-9476-4359747c0543
 20 11916d32-615f-7b2e-9175-adf5e99f3485
 21 cc48b8c3-cc5b-7a0e-9adf-1e22faf3cf89
 22 f72250af-3179-50ce-8822-9d09fdacaa44
 23 1d6e7059-4454-8c81-a832-2cbf0408b3b3
 24 ee0a485c-fc74-28e1-ba13-759b9f501753
 25 65d9b825-03aa-69c9-8fcd-20c71adb732e
 26 5472ebd8-8985-6f53-b9be-c17182397a2d
 27 82dd6dc1-79d2-439e-a3e9-18f5710e6322
 28 d8abeaea-6212-2c87-a619-15a773b78f3b
 29 dd55388d-c1ff-2084-98c3-27e3050f540d
 30 e0115756-fab0-0292-b39e-d0cb5a528f30

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 834555611810704208777582664220. Exactly this sequence comes out of new Random(745).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 2 of Run 24 (seed 39,416,093): new Random(39416093), Next(8,64) per post. The RNG predicts N = 30; the post has N = 30 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results