A858DE45F56D9BC9 archive

201208170312 ybygd

explained decrypted filler

3DES(name+title) ECB, 28 GUIDs, seed 112

Metadata

Post ID
ybygd
Title
201208170312 → 2012-08-17 03:12 on A858's clock
Posted (UTC)
2012-08-16 18:12:04
Timezone
UTC+9 · title 03:12 against posted 18:12 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208170312) = 120d0ca616ceedba08363268d18295bf (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
28
Filler GUID seed
new Random(112).Next(9) ✓ verified
Run
Run 24 (seed 39,416,093) (seed)
Draw
6 · predicted N = 28 ✓
Machine boot
2012-08-15 10:18–10:21 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

B4100E3F7523E52D 0E42B6B6F522328A CE44E2F70296F1C2 E3A0624286DA3B7A A7C68F8CC1E73D5C 68E0831BFAB8FFD3 33B7E4FAE2C18BBF 8190B33F782E7DB6 2A335AFFFFA7421D B855A7A5E79EED2E D75B544473A6AE90 F03B4CAACBDB8D78 10490C2A93EA4D0B 15B4CA611CFAF551 1F75CBE3D92AADA4 AFD9E0A779B99634 A19405769815AA08 27292087E44AE7D0 8EE2046AA991DB5E CD001D0B2349A288 1F47E7E8F7E10658 C29DB021177045E5 BC8047578609E4CA 27EEEE8CD5134326 A283FA166C2E188B A699F385CF5A65E9 4128D543F1D7A43C 6A3825EE6FB08397 8FAAF2AFA79AFBFF 9403E7527792EC88 4CF97DE235578C93 292CB6E074A8F703 0DDA64CF54E6D211 D0AACAFAFF6FA2A3 35B934A1FD6C5A22 C495315977F1F4C4 DD2F64EB2BD33D8B 8355F14E9B59A300 FA2E1DA73DA075B5 F66CE660ED3746C1 B501AB1E47A6B2EB 7E2C37B93CC16856 44533FD95CBF1F65 378B16A2DE67F191 8232732481BED992 297C802E81231100 B9BF96134CFC56AB BF211AF0621A2CB0 5E63E2A9D37A37FB 7D1FCBB68F8F4572 13A00DBBC185F812 B9D5113D2C1E9372 CD247026D97A68E1 167F4DC506F21D32 4E1717F9058232FF 30E29BAA5BCAC802 A6AB87C25E8605E2 6D35F9201695688F F0559FD138864D9B C9325DACD9F559B5 DB30227AE2F00855 3F022F46235AB12A FCF31748F7169E39 F00D80D8A76AE4A2 61D0BC1E3B590EDF 72D6AAC21C281F1A 12A1FC7949A511E5 9D96E325C39E682F 9A424BA93EC35D67 145BAF76B728D117 10FE2384B87534FE C859A932A709C5FF E731FCB046F2670E BB18062D90DD6BA5 C9189782416C87F7 ED8FEA8CF0629DB6 C4C35729DA30B1A3 3156900C89D85293 7884BCCF690E6CA4 1F09A5A98C4EBC58 D1D35A91A5396D04 A37582D918A080DA 8F7BEC898D9BA6DA FE6206E426646C89 F083440FEFE18EC6 5F63C1A7147348F7 F06DC2308C846C0A 6894B31C1BF955C6 6E7B28BF1AA2905F 8F9E300ECFEA5B82 E39B5E34BCFB20DB 565244604C82F146 58AF0A3901DFC16B F02CD9112150C8A6 56A3C37F78762C9E EAF7B01F190759B9 D57E390B875C3E2E D77C8CEDC2746C91 FDB2F454F4E9933C 85B912D0E6567DF5 9A6A5480F9A560A8 B90B31CCD1203864 23D0D2BF0B19AD9D 851139F7F8F0F2A7 E675C5E58684BE81 0693BB0C8B784642 12097630EB06F2F3 7995B4A9EEB24F3E 42CEB120E04C2027 381E2ED6E1E7A5B6 FB8217AC27672716 94DBE0C59371FC41 D1305960E9B34514
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208170312 (name+title). Key = MD5(password) = 120d0ca616ceedba08363268d18295bf, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 f612b222-2cbd-281a-abee-653375c666d6
  2 f1483858-5e3b-6ff7-acf2-b45b684bfe2c
  3 46cdcc27-12ca-02aa-a2cd-0fbdbf628df5
  4 ba9d1ced-f45d-40cd-951c-a81532c123fc
  5 cbb2815f-ea99-69f5-b4c2-251a6cb4145f
  6 b9569111-c486-3ddb-ab7f-9f4d77d4264d
  7 7fc6c9e7-cbac-027c-b883-1649f0b92b66
  8 fb0a45ac-e546-5143-9193-952b98434f77
  9 978ad9f4-7ff8-7c9c-a3e8-f1b19cc70de6
 10 cbcb954f-3619-5b2c-b471-b36ffb17b00c
 11 3cf2daa4-7f7e-71ef-bffc-9668eb5edc29
 12 6a0b3c67-f487-8e80-bdcf-8da22f8fca8b
 13 41f57488-ec64-5841-8186-04df134aa0f2
 14 05af3c19-23dd-6424-9a98-095d10050f3c
 15 48353691-206b-3fd3-8fc9-516cd15d5912
 16 6e2c7ff1-a61a-8c05-b8df-ff3eb9320982
 17 0dcfb651-334a-89ce-8878-987b92785f64
 18 1e1ea86a-ad2a-3aba-9506-5cda0df36dcf
 19 9925daf1-2f2e-6873-929a-8aab632a474b
 20 8e432a35-c6de-64a8-aa50-9bb81dc4ccb1
 21 37ccc12b-0dd5-60c5-b364-1f66163eeeac
 22 cea85ecd-8d21-2866-b0ce-fed0d93e3544
 23 66d6968b-9869-85f1-9851-ac2ac1f7d42f
 24 57c25007-5522-12b4-b501-d047f08e380c
 25 bb4ab407-2136-6860-a837-ee1cd6fa9a76
 26 e5bf65e7-7eca-560e-91c8-75c73a6ad371
 27 03df7ff6-a6a7-230c-85ef-fc3a3e89f428
 28 d4d4b036-88f3-0f23-8fc3-d69e34cca7af

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2604630575785638836662816520. Exactly this sequence comes out of new Random(112).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 6 of Run 24 (seed 39,416,093): new Random(39416093), Next(8,64) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results