A858DE45F56D9BC9 archive

201208170708 ycdm5

explained decrypted filler

3DES(name+title) ECB, 34 GUIDs, seed 484

Metadata

Post ID
ycdm5
Title
201208170708 → 2012-08-17 07:08 on A858's clock
Posted (UTC)
2012-08-16 22:08:08
Timezone
UTC+9 · title 07:08 against posted 22:08 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,192 hex characters · 1,096 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208170708) = 4ab03191fcd46a1bceb5e36b2210a15c (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
34
Filler GUID seed
new Random(484).Next(9) ✓ verified
Run
Run 24 (seed 39,416,093) (seed)
Draw
84 · predicted N = 34 ✓
Machine boot
2012-08-15 10:18–10:21 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

AE1A3328EC1D0B92 29FA32F9FC2B9302 D74A06F41C1F15F2 DC975AFFFDDF2F6E 791AAAD2C9421D7B 08D9BBA0DA782901 01B775FB651E031D D002306371343263 19A0494D506A3F9E EA59A739919E601C FA75AFF259E0DF49 B1DE9C00152FBE2B EA954DD6F77E218D AA55F198D7E600E8 E3ECD58EF102A44C 2FE84F39B85EDCBC E5AA44DE1BEF42C6 264886D3AA838F65 D110CB11D5C812DA 319243772F7897A0 DEC7917D865515BE 50488AA11A368AD5 A4C8D9F8CE259915 C1D42B0266210047 EFD5C8E57E6FF1A3 81D8995C1492E547 1D9B71DFC7E39291 E920B4463BDD9E18 1C5EB863811DD30A A70BD26DEE971111 7E788F64D6545B7A 40A287B4BB23F498 D6C459E646AC3B1D 2665004D003FBEE1 BFAF7E0D6D897559 D3569C222BE312EA BECF011773A95614 E34F0BE2F5B1CAE3 8E86067FE3ABB0A4 EC9BEF4F6F655659 FD3332240363A11F 025245AB3D2B3520 B5EACA4D83BCB5B5 D4CDF38F360A6C3A D9A1DA4C23AC652B 67385C4980BE6B57 978A04CFB0A93F82 C2D87DEA9551051A 4CECA16B8EDA81B5 E0277FE5379AB336 496B1BE5BB3CBF2B 23E73501A8DA0121 71371EEAA3CAFAF0 06154A680D252F18 CEE6E5B691677DAE 5E8329CF9195D6C2 C8F3A4AC5CF50872 A48DD811DA717C22 092F4A11EBAC29CA 095BE498F8B6D841 576205F53837298A E6B19831DA5035C4 6DAC08BD9347BE52 A763FC42111130EF B542C4E036955541 949DBDA4AD2CB623 FF039D4C7224509A F4305B568BABF0BD 11B2150801D882F9 AE8E6C8CBD11BE55 70421197D4E7B1E6 51C96C6379C89C6C 7986A79C940105AC 469CA09218D1BFF1 3C7ED71A837DF57E 24711126BFA8DDBF 01DC0F1E5D1EB75A 23E46D8A9F5AA405 25534C1D9ADDC341 7A11334DB800C152 88A0374677C83BD8 74B6EAE6A04D721B 6A076C1CC940690A BCB4E685CECE1264 CFC21C0206C37278 25B53DB103A14971 EFD568731E9CA52F 7022A8B02B649B58 BAFDE4950A254FA8 482DF0335709E344 064E3DD3C5829933 971EC3FE2E269520 2C35D98347FDE1A5 F7FEC8F1021688CD 53F90A93207B4302 A015D7C81230B5CA 208CD1FE5586AEB5 9BBF164C2C2EAC0F 9254294C8801D307 8174A136BE85BB05 25EA3F91351DE1EB 5C779D9F6695CB53 F46FB35E3FB5BAAB 0710875E11A32142 8CE4404D3E1FF4CB 65D8509505B19DE0 28B937C5FAE139CB DD272818AD6DFCC4 BD2437967F7D5D09 2F237ED2183DDCF8 D9025EA5AEEF19A8 CF5CF8896E0CAD0E 123F10A9BFA7E1AC 5596D0B4B19715AE 078CC8E690CAD73C B8D2FD27BDACFD18 D1D0AAF8D80CD5E1 4E0D8BAA12581DE6 717834B049E55DFF A3F65D73CABCCEDA 3F84C795047297C6 8E552976B16B9F41 3BE4709AECFCA7DA DE57B52A9C70D388 5D10F27F33C88ED2 7E54694FC98A41DC DEED57878A1A1FB9 C9EEAEDFD8E012BB D51B56C10E7F47DB 0FC9F8D7E32E5256 EAB64822FEC3C116 13234B010B04A0DD 451C09BA20387511 7FAB951406DBB2AB 295281129333B780 60217FAD2D3218B0 8C7FF73B3E474CC5
  • Read the ciphertext. Strip whitespace: 2,192 hex characters = 1,096 bytes = 137 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208170708 (name+title). Key = MD5(password) = 4ab03191fcd46a1bceb5e36b2210a15c, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 34 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a53afe5f-803f-5845-a8b8-831734d1de03
  2 75286e30-e262-746d-b5c0-817ef5096f12
  3 af6ae9d2-bab6-0704-905f-4c9808a1a4cb
  4 2d5bdb29-7099-772b-b361-4f58bac0ed51
  5 20649a60-1b93-68d5-b4eb-70baeab634c0
  6 5eced3fd-244a-4c84-8e4e-4727e8540ab9
  7 e47113ec-add6-6a8d-9af8-6e4a611ccaf8
  8 2f978a01-c7ba-210f-9279-0c087f2468e0
  9 993877f6-cc1d-70d0-ae2e-80194a0f4f1e
 10 f749dd62-11b1-67b0-98d0-16ff5fa6a711
 11 fdc10556-4d79-7b52-8555-33ea64d385c6
 12 7923ab2e-bc3b-23fe-8f6f-088ca56896ed
 13 788ed55f-0992-3082-9d2d-29d649c790c0
 14 4dd1e08b-a5a9-273c-823e-45a37470a055
 15 a5b029d3-ca05-6f9f-9096-560da38f02de
 16 46820595-880a-267e-aef3-d3d4dcbc8168
 17 53da3e25-6b32-234e-a1b2-d6e24ce27ba6
 18 29f39140-367f-0fdc-8e2b-22d622278c06
 19 be240262-5311-724c-a8d6-dadf186a4094
 20 96e223de-98b1-6a6f-a48f-68d96944877f
 21 b9d761c6-0914-121c-985b-18be9aa6cbca
 22 cf95dc7a-f5ff-5afb-b704-46df3efc37c3
 23 3926f14e-1085-75c4-be82-a54f77715d97
 24 18a4b02d-923b-188f-8ebc-dd5ecb8bf140
 25 4823e4af-a6fb-1231-b82b-c1f93fb04acf
 26 0fad6c7e-be98-7547-811e-15edb41fe087
 27 04679aa1-b378-065a-9210-a9d837b1a58e
 28 2d09440f-8bc9-518b-b804-16e7e1096f29
 29 3e26b374-01a7-2a82-a7f0-32a54f98568f
 30 c3b3fd36-d5b2-7d9c-82da-fe492fbd80f5
 31 f26f8d4f-d8a7-7f0f-8fa3-218921cffd74
 32 95e64073-6e0f-8019-841f-8f66bf5275d8
 33 5e9b2ddf-78c1-8e18-8ddc-5a48d01e8887
 34 01eb673c-009e-128c-a806-1254d076bdd6

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5707646276723262207615711705277881. Exactly this sequence comes out of new Random(484).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 84 of Run 24 (seed 39,416,093): new Random(39416093), Next(8,64) per post. The RNG predicts N = 34; the post has N = 34 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results