A858DE45F56D9BC9 archive

201208170509 yc6iz

explained decrypted filler

3DES(name+title) ECB, 31 GUIDs, seed 465

Metadata

Post ID
yc6iz
Title
201208170509 → 2012-08-17 05:09 on A858's clock
Posted (UTC)
2012-08-16 20:10:00
Timezone
UTC+9 · title 05:09 against posted 20:10 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,000 hex characters · 1,000 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208170509) = 6cca8bebdac1cdbdee0484cb29995ef0 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
31
Filler GUID seed
new Random(465).Next(9) ✓ verified
Run
Run 24 (seed 39,416,093) (seed)
Draw
45 · predicted N = 31 ✓
Machine boot
2012-08-15 10:18–10:21 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

F1627BE117539D7A 72E6F9DAD745621A 4B06E0F3AD3EC874 867F0FC588C4A22B 71794866A3C48605 7A46F3F16B1A7AE4 D7019622AB002DF3 D981182276D7388C 182DD0743F827EDA 9291B6F899AFA698 9493F267D79D6A67 9124FB6134DD99BA EA9DB4C4A9F2B25E 7D1113BFF04B1BEE 121E5E5BBD298C9C EA2D4401DC4BD277 1135892FF162EF72 E129FBAC5C24DB6F 736466E91BACEC80 CFE78F46FA1C2C28 AFEC4B02B4CD6279 4C268A48E2CE98A3 436D4302A699A569 FEF321C689B908AA BC21A91BFA494454 740D2F556E87B0A7 0398350AE984B3D5 1169AF2E8225C2A5 EAFE1D068E63D6F4 81F546A49B87277F 387273A95D50DD23 F7E7FF23BBD4D28C 06FEC1AA8D43E723 6694DAE7DD10B56F C59EFE46518BF5F2 91EA1578EC44F573 5BCCF4D5807BBB74 1EEA8A58866A5785 DF6B3864AB98F17C 5B558B7B4D3E7EE5 A14F35C0FF35ACD2 7B4786AA60983145 FEB96E080B3D5476 0637D4583839D04D 7547636CD052E404 A7DF84DDB8F269DE 2FD9C8ECDFC16BFA 8FF803C53C846084 37939188BEAACE5F 5B4D33C167945ED3 7C3500382DECA559 88EA991407E33E1A 25346A2EBE2FBF05 90872D42EE5951FA 511931A98BA1BB61 857D2A5BABB92A65 EFFE9A24783DA0E4 1BAD95EE31A019E2 48236D2D41E2C87F A758565DE1573AEA 954888D5DDAE5AEE 6F6C9733DE546A2F DDEC2C60E9BDFC2D 99A6761B7329FB86 C56FFB7BB4446989 6E918C0D24B9118A 51EA833FBF898442 4DF00A6DFBC5040C A7FF862196D07119 3859001B506CD19E 47A59C5AA68A7773 0A8B1CF71E8E818B D9157CB484F3C41B 772F5B43A34DDFBC B320F25910C85DF0 90A4AE582A81227A 7A7DBE67D48B82AA AB44D4E640E5115C 6EDA38A1ED0DD399 49FD49620D6EC00F 379B436CF0F47609 07D30AD90DA5FAAA 27665627DF0B31F3 33C8D66D20C86DDE 408C28FCE52F2718 90BD24AD0A866E4B 29CA5C94BA3DB22D 6785E5E582F5461D 27450AC2105D9879 B12D5ACF0F13662A D93F0789199AF215 052FBF6925917EEC 08CB064503F398FD 2D44A23561840B60 973986C81D3A60DD 3B8D1446E83155D1 95CF91502D079787 96213B3694D38B70 C384D26F65BD434C 5BF247050F45EA91 63D7DDE73E51766C 67DADC26E83443A8 FBF16CB63F7451E3 DA39BC1AF48EB9CC 365FFFB6B1AA5148 77EE8BB2132ECAD0 5FAB343EAAB58AB4 8F92CFEA50BBE815 CFC8DB9708E235C6 04F07B5703CC348C C0C8370A8BF45C0C 227C66C979542D3F A918461B294BE70A 4F35CBB6040D9C4A 661CC0B86280A211 4FCCB5A7E8B9C1E5 9ECCCCD8C340D2B3 963064D854D240A7 E159500043DBA694 9B11A3D368D82EF2 6969A0713D773436 C3B16AF41ECA2209 A929D8B415D3F99A 68E10E93A9D796B3 F798B785902D9795
  • Read the ciphertext. Strip whitespace: 2,000 hex characters = 1,000 bytes = 125 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208170509 (name+title). Key = MD5(password) = 6cca8bebdac1cdbdee0484cb29995ef0, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 31 GUIDs as hex (shown below).

Decrypted: GUID list

  1 812a2584-7e3f-5088-a49e-eacfdd785d9f
  2 c840f4f4-9f11-21ae-a11c-16153fa0b831
  3 04cf2684-dde5-72cb-8262-b94e4e979f05
  4 8a67c4bb-d08f-7aee-8ca3-7b4e2e54361f
  5 aa499435-4194-157a-a4a6-9e9c31abb1e3
  6 8bf00832-29ca-8722-ad6a-a2ee03f914b7
  7 c6e7403c-3112-2276-96b9-eb707955400a
  8 d8cb1ea8-accd-655b-bc57-faf05e2c0517
  9 2ccd00b9-cc3b-416a-8326-f2e0f440d2e3
 10 67fee0eb-33ab-6c9a-a10f-9506d06b8ab7
 11 5f0eb4ba-847f-78b9-9132-1922ef6f6ddf
 12 86a0569c-ae14-4d8e-8be8-fdd411c41e06
 13 4cbbd549-0f85-2e1a-9f66-3a7e8fdeaf29
 14 f4fa0455-fe3f-3372-86ea-13d551579855
 15 4b797da1-65f6-451e-93c5-ef29f6fcfa28
 16 42c83bf6-218f-34f9-9c99-c52b9456601f
 17 e4d8de18-9389-2826-b0b5-355dc5829f3e
 18 11bd810b-a39c-27dd-bf5a-aa96641313ac
 19 7ca3eb08-9f6f-2889-a7e3-ca1bda953c39
 20 8d49f7d4-21ce-3f43-bced-8bfc852b72fc
 21 1c3cf029-c5db-56f6-88e5-5061437891f6
 22 172c2f15-180f-8f83-b5d8-802939d011f4
 23 e80cfebc-a241-5bfe-b830-c0a16dd930eb
 24 eb591345-91e5-4876-82b7-b44dcff1bbfb
 25 11142fba-3a1f-26d8-a95c-b6ab30026e1b
 26 562af97f-3750-580c-8c4c-8b0d22e9d9b5
 27 e00367c5-03bd-6ed0-bebd-dddadc9e6265
 28 279c1d58-937a-7c5e-86e0-bb2a6fc3b835
 29 4d11c434-40b4-88c1-b333-74382f2447ae
 30 64c490cb-bb1f-5ece-ace4-d99dd98fb423
 31 575b8471-3be8-71d5-a74d-e46f8b044d0b

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5277182646742343222358542567857. Exactly this sequence comes out of new Random(465).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 45 of Run 24 (seed 39,416,093): new Random(39416093), Next(8,64) per post. The RNG predicts N = 31; the post has N = 31 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results