A858DE45F56D9BC9 archive

201208170649 ycci1

explained decrypted filler

3DES(name+title) ECB, 34 GUIDs, seed 831

Metadata

Post ID
ycci1
Title
201208170649 → 2012-08-17 06:49 on A858's clock
Posted (UTC)
2012-08-16 21:49:58
Timezone
UTC+9 · title 06:49 against posted 21:49 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,192 hex characters · 1,096 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208170649) = c6f14ee622bfe20f203802bdb9f6d27f (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
34
Filler GUID seed
new Random(831).Next(9) ✓ verified
Run
Run 24 (seed 39,416,093) (seed)
Draw
78 · predicted N = 34 ✓
Machine boot
2012-08-15 10:18–10:21 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

09BE2A89CECFA9E5 5F01C15A1725AC8C DE8AE74FDA687774 318A2B3A6E59F8CD CFD869DC9D47CF60 9665B87FCFF6594D 9C782151A8EDDAE8 FAA0185028575DD5 A83A4EA3F9BC07B5 24299188141CD5D8 8116CADA83C71BC8 39226FBCD04C7DE9 78DAC55830566120 8F7D6F9B032C4153 BEA536430E56F04C E5D2BB9EEA62488A 9FDC2E077ACC26AF DF05330CE1DF5D4A EE279DE2EA90D2E7 77A7DEE494775F59 4237438CB013B2D4 DCF7F863BC6632DB 99F67DBE95E51EC0 0C63658C9186604F FB93A7C00E8DD2ED 0F6D13EC091C79A7 F801A8386B8DB701 980EC960E43506A3 04F65578D4556A4B DA666F9DA9E856CB 16A2BE7CB7DA12F7 FC52B0C9562D7C02 2EAA4A2BFFBA755E 4C3B21E803915632 2133B8B1AD42D38A 43D1830E1AD12434 EA997CCD3AF7A417 D5B92AA15FD6ABF6 D8AF7BDDEBCAC3FA 2A4B80EC92B60D17 34A3972FBBA92C77 B0411BB444561760 5EE77EDFCDDE8D66 A8C98672449A0E6D 4C43146934DC0654 2BAAABEB046C63B2 10AFE4609A0333E5 B00E81EBFFC9B1DC 9851008279BA3377 73325DA4CB2D89C1 3991E312E9254F5B 09CA4F4DF50BD19D 849F7CB7D511D9B8 C7FC053BC9BA145F 973C4F3DF9295C38 87C10E17346008E3 FB1B29F7759DE1B1 F95111A002CCA419 EA6AFB9F34891B01 A14628061931EE21 D0BA8996D2D3A0B5 05B227C2A98C778D A2E7DF20EB5BA745 37A69F1596960482 5DE821D110717D1A EDAD47645245DEE9 F8D9CBF624F568DF C82F54CEB9F88045 5210E096F9ACBD69 1D6916A7C680413B 3505E87C974C799F 00517783D9744C00 FC9DC2A84FA1BE26 7CA9439EDCEDDFA7 251BCED304994D39 0B7E0B378FAF7A2B 20A9E9326E3CDFC4 11B6EA3D8C5C705E 82AEFB7929CABC32 D4697DC4F93BEB4B D0B8B15FC3E7DC42 0610827B8F815942 4F2AE10D123FA3BB F522962ED0A7511E 0A13334DFA71F9F0 AFD2E8AA55F32A76 02A94FCFD2081387 1AAFF0247E481366 769BEAA22F767016 089D86ED48B026D3 A57D331509A87F6B D07ECD89DF5432A6 A12214CEDC206AC3 CC89C993414FC55C 94DECCE4DD1311E1 8A2EA187A86F41E5 DB4EB1E8516CC08F 742EE420744964B1 A622ADEB3B627311 8172F5C3E9D9F985 750607CFC62E739B E60F5EA9188079C4 1FB28F537495E0EC 48147E881C05808E 92B9A09BB455B132 85AD16B7D27EA610 A2796B6324DB1447 90D07070078A0E7D C1971212DFF589D3 E69830B115F301BD 0FF1AEA6F4D830A5 B882F93FB2300061 8D644F5ED953500C 06BAF9A84D2BEE07 2C3B58F18E64215A B8DF5C7F79C15D70 9E775A7E6CA97B55 4CE735A015DB42D5 7E031341414EA066 60C353EB3FE962E2 00A36B61BFB6FB06 BA826E085FEC3A52 D4E8A994E241F159 E7D7103473D8CED7 9EA257A9372F6588 C430E8F28D62BBE8 B86193A998E2A639 986ED5A46D929CD9 04A9331E6248839B 44D0BC38D2841CB2 2D44A22D56863DA5 F8A9D785221ABAFD 40014AB6B0364FBB 9E1794D22E0F4CDB D2AEE9267E65C9ED 598EE2761E318F2E B4098607928BCF5E
  • Read the ciphertext. Strip whitespace: 2,192 hex characters = 1,096 bytes = 137 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208170649 (name+title). Key = MD5(password) = c6f14ee622bfe20f203802bdb9f6d27f, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 34 GUIDs as hex (shown below).

Decrypted: GUID list

  1 fc288a39-9fc6-726f-91c8-7944aa852311
  2 488244f0-791e-5af3-9e5b-0b9984edbae9
  3 3b936ed1-03a4-5960-a08f-990014d982b2
  4 36a6035f-dabd-8b56-82c8-f99f0f224f44
  5 3dba85bb-de20-37ae-b76d-4dbcbd477160
  6 f91142a1-6a3d-6a3a-a311-a78fb9e02647
  7 c4c0d15d-bbe9-2ca6-a305-a334bc788fac
  8 857f5d6d-d115-37c5-b813-7be708db1d40
  9 35ff5c45-44f5-707d-9cbd-5aa3397fe14e
 10 51ae3915-69b1-6548-85b5-006b557013ed
 11 72a2c048-89eb-4b1e-b66e-8b5adc8f8b85
 12 66863718-90e9-2998-9d78-8ab9079b9b1d
 13 106c7b9e-95d0-84a6-852f-e3fa0e71626f
 14 5d54524b-c3fe-7354-b870-c0ff7ad479d9
 15 37d109f3-d881-51b4-bbc2-a21596f2ba6f
 16 a8d80a2b-02f6-04d2-a7d5-e6c3e0a421a6
 17 fe948b7e-6966-1b05-9c1c-b5b75bac9a61
 18 9e5689fb-6e7d-1a94-80b4-72c3efe232a2
 19 f55dbbb1-cda1-1b8b-88a3-0919a8f5f2f8
 20 e3a4acb8-4e7a-0384-a091-d9c6c76fba96
 21 4813963f-a4b4-2799-b5e1-cb0568e00780
 22 4ff282d3-5c9e-689e-b006-fa3b484e3eac
 23 ae194a0f-dc50-3508-afa9-2b8d26c7a43e
 24 1bf33cc7-6d71-39a2-b5bd-8c5f6e1535af
 25 57b8076c-30c4-132d-a68f-a486ebc7f178
 26 57352df6-248a-0df6-aee1-fc3d324974d6
 27 2bc30130-5d03-3425-83dd-c935435bff8e
 28 79ee093d-f8ae-5be7-938d-0e6ad43d0811
 29 adec67d2-11b4-00d8-a8ce-4fa209be4c21
 30 d6d57911-b25d-35c6-9d2d-bfaa6dee047a
 31 4dff0fe1-0851-82d7-a3c7-ecaf4f23fcf1
 32 62c2d44a-198c-39e8-99b0-585fec45af18
 33 b12328ad-4b53-4e86-8c8b-a153a6e3ce26
 34 3c404ffb-b0a8-78b2-96d0-74e2b9ca4220

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7558362376428750111026331035038347. Exactly this sequence comes out of new Random(831).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 78 of Run 24 (seed 39,416,093): new Random(39416093), Next(8,64) per post. The RNG predicts N = 34; the post has N = 34 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results