A858DE45F56D9BC9 archive

201208170500 yc5v6

explained decrypted filler

3DES(name+title) ECB, 41 GUIDs, seed 0

Metadata

Post ID
yc5v6
Title
201208170500 → 2012-08-17 05:00 on A858's clock
Posted (UTC)
2012-08-16 20:00:56
Timezone
UTC+9 · title 05:00 against posted 20:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,640 hex characters · 1,320 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208170500) = 07dd734277f011707c0bfbb91ad356df (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
41
Filler GUID seed
new Random(0).Next(9) ✓ verified
Run
Run 24 (seed 39,416,093) (seed)
Draw
42 · predicted N = 41 ✓
Machine boot
2012-08-15 10:18–10:21 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

5A22B2ADA7BC8AAF D594F59779BF75EB 115A4775D856D5F1 228BA502C4A50C4C 502AF927A7FA4CB8 1986656BC08A6757 C30CD972BC4D0C49 69AB97DAFC04DC8E BBFF2E58601A4FFA 111C5EE1A77851C7 3DEA4DBF513D5CE7 1F5E395852ABA5AA A16A6EAF79E2A9BF D6722B2099BA05B8 C071183015CD7F24 63BDB8DC3A1EF1D6 DA1EFEBD6CBB272C 9EE8104E5A8B980D 447582C7D7B60973 021DBDCE053B71B9 9388CC3C5CB662B0 B1189F0728D66529 7F1D4C61143D5BE3 3486F8C62FA56A77 2F1DBEC391C4F514 5482CCFB2A1FBCC8 4C3F91A33855BF33 7D68CDC29AE7DCCD C6CA375E52090A24 877F31EF2A3037A6 430656F11225E953 B4ED95ADF595E1D3 29922A23C5A3E97A BDFD65283F6995AE 6598293A863CA3B6 6B41F299D3120741 4335815EF3154960 737BE84977D5BA7F 0BE8D587BBCF9125 FD30E24B16027B8E 32537E6CBFCE62B4 3D44B0A17441C784 D0FBF3C2E354C680 0AE9768A5365D74B 9B63AC61F97411F2 3BF88BD6D3ADB2F1 0FD59AAC0C24A4BB D3F449D4A758D957 FE6CB7DDA43018ED 42A75119823AB2E4 DFACC4694D6C3891 853C6B363EF26503 9AE5ED5674D0C79F 4452D469721FCDC0 049E2D9AB822E854 85043E7C17C0CABB ACF8843584FAD5E8 AB4F93A8AEF08CDE 943D260AC5A952DC 849EBFD3994733D1 4B93F835930DDBA1 0FC03C733F2A547F 3BEF435A6977A3DE DAF1561E8DE1E7E3 25B82B616768F4FF 2696D5C41A156C69 670289A9FC3BC116 8A09812E2A62921A 1923D00A2C639C4D 5F583A1FAFA55D44 4FE95D8216846E6A 481445B612A4708F 850D7A190C91D8B7 449172EB11228B00 995BEC0968B333EE 5E11DB5DDB02F057 5D1FFBD172A65CC7 245FA14D98473EB4 E93AD662ED65C6F8 F87B5D0048576DA1 8AED555A1CBF4BF0 946D91A011105BD2 BDD9EB8CAC170874 9D38350E4A77FBF1 A757510768E86C93 F257CC8BAC56A5CB 1529E109CB07E39D C00C41535BA52ECF 2785A3FE6F09AD6C B9ABFCA26B4B3940 4516B1A86F828509 0FFEC4F18E9F6460 29C0DEAA26268C0F 20BBC998EE097DC4 7EC4F80CBEC30B5A 1E0180057B26A4FC A197C070BDA8F2FE 581B1C323F7D5ABD D6D525AFEBB40D93 B2FBE557F9E39F31 7E3F65EEB9F62968 F67D4316A7DBF269 0A10B93F62803FFC 33E98E009FA07558 7512573D9DA20CC2 038B1D6BFC758792 67DDDD55E805F74C 512A1F181935190A 45531B716EE5E294 57616756271DA116 A36DDD8DBDDDF69E D0F11DEAB009F3B3 A733EF24E1DB0D6E 97D3E68B744F6E97 AEE8A4FAD683B19D E0808C40826B9A52 2097B14008B7D4A1 FDBD26B69D48E918 01B20AC5025DF6BF 067CE7423B2155AD 61BB0EA9EA020F7F 25FDEB71072F19F8 D1C818B428478BD6 04CE52A866DF8424 E42AD8F67AA88C04 8ABB406EFCE5BCCE 84BAEC658CC05537 669EF5DFBC883BAD E12535B823274416 1D387827699D8C6E EC23306FA12AD25B 4AAA236FA2F574BD 4755ABFCB67AC2E4 B244187B8366B309 9159CA8D704BE38B 8D43E039063C4F74 1CA3362CB8DD4A65 1966114379CFA217 E06445DC25F233D5 7965027386FAB389 B8C90D9D9D604C3A 1DAECA060D8BF96D E1D2165429CC8A4A A457A26C8C302CB1 8DD755AD2D08BBD3 95FC60E25DEB915E 8DE08184DE51B89F B8E4E1A72AC89B48 9E841183F5D16F54 F448BCDF763DE7C5 5C3E6BAD24687C61 74E9023D9D747F6B BB5DC61F8D409B38 536AE6E1E1CF6249 DA382605D4B89361 79033EF49754BCE3 C410E9ECC6915759 E89B4C3A88408923 05A1B50A2CFB0C33 CBA964F2421A8DF8 CC78B8D2F3D2CE1D 9E85DA1D2CB3A137 1FE5A64642B6FF58 916C4E68E34D53C8 EDB3BAA80B4EE8DF
  • Read the ciphertext. Strip whitespace: 2,640 hex characters = 1,320 bytes = 165 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208170500 (name+title). Key = MD5(password) = 07dd734277f011707c0bfbb91ad356df, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 41 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0542b975-9b66-67c9-a508-da98a9f44f53
  2 863664ae-e926-7aa2-96c7-b2566765e6b3
  3 ef876ce2-37f7-600a-87a8-885fa8681f0b
  4 3b14fdac-550d-520f-9d5f-fca9efe5097a
  5 a71c00e0-11fe-136f-a00c-dcd52929eb6d
  6 f92e8d65-d754-573f-a2f4-ff8147396aca
  7 703717ec-3a47-8000-8239-e3ce9dc3e585
  8 e2b5b6d0-a27a-3768-9fbd-299679032bc3
  9 df4ffbe7-b1c8-8a72-8bf4-74307dd4ecde
 10 84f79b2e-bd9e-2e60-8665-f1daf4f2659e
 11 c0039262-35e2-2b44-a4a9-60123705405f
 12 c77778e6-f17e-4447-9a43-eb851ae7c77a
 13 1bc4d747-c087-52ad-85e6-696ec7d7c9c6
 14 2075a8c0-7bf1-418f-ad06-2bb5d0c0f1a6
 15 f77cb5c9-34bb-84ec-96a9-6468ce5e9895
 16 cb859db2-9122-07fe-be8c-73b9e37bad0e
 17 4f78fb65-7afe-70ea-9631-9edc2e9e06f8
 18 ff1809ee-4aa1-8f60-a0ff-81a6e161b05e
 19 f29278ee-b12d-6a20-92e8-790a874f7635
 20 924688fb-3439-2601-9895-b7b4d50f3c42
 21 b9054a86-527d-7523-9795-af9276c0c437
 22 69603753-db8e-7dcd-9697-8f97b517b113
 23 db46df17-121d-88d5-9041-e70f1041bfad
 24 9bdca941-e5c0-016d-8b07-0403e3d8056f
 25 4bfd528b-6061-65c8-abfa-3311a8ac0ff6
 26 0a9d5dc4-dba4-44ad-b3c9-45df62da48d6
 27 1c3d54e7-3e05-8891-a840-059e19faa352
 28 d7f6ef4a-4bf5-62de-b59c-f57eadd415ba
 29 ee6cea0e-f181-4f13-aa20-e46236d17d40
 30 77935747-37fb-0a0e-88a3-72963fc3e1e6
 31 83d05b57-af99-10c7-89ae-867b83bc38d7
 32 152b23dd-78e9-419f-b7c3-101379e68bed
 33 df62b3ac-1343-2c44-851b-1f5693e0678f
 34 b1fb0a7c-4b20-8c66-991c-abc6e0f826f2
 35 921a637a-90fa-51bf-a5f8-f51167aaa49c
 36 7c679900-154e-6e77-bf9e-b674a89b60b9
 37 4d93d463-a933-05f0-ab4b-0d40c5f0df16
 38 ced64873-314b-31e1-80f7-09d7b22e8536
 39 f164de22-672c-3f40-ac4b-7d0923789b97
 40 0b161e4d-e4f7-8eb4-94cc-bc2bd54edf52
 41 4b1d8dee-b289-45e9-9711-2ce7bd0a0abb

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 67651583822454807862778064864014285603384. Exactly this sequence comes out of new Random(0).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 42 of Run 24 (seed 39,416,093): new Random(39416093), Next(8,64) per post. The RNG predicts N = 41; the post has N = 41 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results