A858DE45F56D9BC9 archive

201208310315 z4ibd

explained decrypted filler

3DES(name+title) ECB, 33 GUIDs, seed 162

Metadata

Post ID
z4ibd
Title
201208310315 → 2012-08-31 03:15 on A858's clock
Posted (UTC)
2012-08-31 07:15:12
Timezone
UTC−4 · title 03:15 against posted 07:15 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208310315) = 7dd65256bdf2963ea9b2a7c6954d0cce (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
33
Filler GUID seed
new Random(162).Next(9) ✓ verified
Run
Run 27 (seed 1,337,299,625) (seed)
Draw
15 · predicted N = 33 ✓
Machine boot
2012-08-15 10:07–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

0159CF054A243AA4 2AAC8B130C4793FD 2E702B1B7D9340DE FC9F907EA5220487 CBEBCE4A6DA110B5 FB1DF4234CE6FE51 C670195E1A6ECAC5 FBC49B67A0AB134D 723BB51087801A0D E9865A7B0FB5E546 70DCEDFDAF9EFAED B643E31C455DFCC5 2943661153D9587F 60E142F853FE5D71 9D9319019F4B3D62 A80ACACAA06762B7 6019B96FD8AA23D4 3B11002676AE3A9C 9A89D6A8B9121909 8FCA6C69CC624EC5 FCCB9880108135ED 3BB5D00D09F4C4EC 63A6F385F59D3409 363D8DCCCB39ACC0 D5F2FD4B9D7CCB36 8713144B531AE177 D75A4BE0BA50A1D7 2FDD35763FADB37E 078E77BAA76DE035 62EDE27690166FF8 BE6B862102513206 5D0885E6BDB61C99 097DB3E77EE593AA 47DFE6F9DE1D704C 7EF147E4C5620C5E 26427DD40AF7181D B59FEB9336206FA3 A2B37B033E88231C 5A02989F9F4581FD CBAF4FD18216807B 590A2A2E050DE040 842476143FDE5662 1BBECF18ED547A51 0F268F83A625CA20 CDE08BED6960B027 E3A47AC5CC4A9F56 C71C4FEA0A6E5399 AFAA7FE6FB69EAEA D4ED2AB53047D5B2 35247C3099CEE20E 614A1FB8E482F28F 9B371C8291431297 357E9CE4CEBE94C6 883E2C442E9A1088 D3D99F0C512538BC 100D674507B2E9D4 3B6C15CAF814A143 A22B9F6E6DDCE587 1BBAA5818ED17D3D 414179EAE099D2B8 6562E7707DFE2C16 3DCA34A6DF11CAD0 86EF0B7F19622AF0 A1FBDBA6EF83B12A F48F3E1E85D1776A AEAC89B54EBCA6A5 E99C8B56ECDA7819 FD0995CE5D287591 7500FED2AFBB46E5 72788AD643994F3A 811054329787BED0 DCFC853816BF6825 170830736EA9C7B4 A1C397FB60791A31 DEB80BC301170C7F BC8386295016B689 9CE17502098ECCD6 A54AD3C2DDCE4137 F1C507B6A375368F 3BA5C188DEA14972 2D03EB73A95223B0 FEB0A324FDBED3A2 8FF80E2133CE4727 F61B75DB25A8F90E 99EDFA190DE4DF2D F3A8FFD152A83A36 6E17FB37ABBED165 9F04293604079067 B836A1E294D056FF 92A93A71AF81E8F9 17507DCB08104FC1 7E8756767E26F7C2 14B6A1C530F9F230 AD9DE780B04AA58C 2C74951C85F78AE5 81D99C41EF79F34D A9791AE0EC0B6FB9 90196272ACBB3846 03E252877DECA068 F5E18D0F607684B9 073D794FE846A207 0EB6B6D034733E15 2EEA3D34F43359D8 902DCBCAFEA7BCE7 8B4C229260C1D031 F730975A29C4FFEB F7DF53C7E2EE3B23 EA425ECA99BC7DBA 8340486C1FF12FA0 623A29038BEA60A2 FB5F4BB12FC081A5 66048E7A580E0B73 701DE3F73915193F 3790199A562E2E09 E1FC7743E75A3E96 1DE37F912E454A71 BAF64D2F81673D23 6182A4B93401CAFC BF180567D491ABAC 3ADB75A3D4AD7533 6F95C874C6E4476E E14A3D72900D0C0B CADCD5C5C85F4083 E37D7A054F676C03 0F18DCBC4BFEFEC7 532F4BFB36504B79 B9DBF3A5B97301D5 81F74EECB21A1089 784428C71E110A3F 0B935499DCB51FA5 31EDF2BE23C028C0 803A5D966D094649 8EF61F46FE645C5B
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208310315 (name+title). Key = MD5(password) = 7dd65256bdf2963ea9b2a7c6954d0cce, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 4ec5a3a7-92f6-3abe-9cc1-0ff2a7dedd35
  2 eb74407c-9bb5-38e5-80f7-b87e74f93e85
  3 058c6911-f3f9-0414-a125-5ec94e3b6540
  4 1d3c42cd-7141-1172-ac94-ca84dac5089b
  5 2882faa1-8044-371b-a0d7-5df9d139ec73
  6 276d9808-7d48-125e-85e2-ddf1cb6d8cc3
  7 021ff518-6433-487c-879b-5eabd210d239
  8 23ecf011-880c-6426-812f-30f2ab2e8c33
  9 3a595669-e318-08d9-91b7-068072fe1f37
 10 453f840d-de59-05a0-b496-4f486e04b6b6
 11 f87651b1-6ca1-5786-b3b8-fc9695b8ca34
 12 fb0946c7-684d-80d5-8b9e-aebe472fd08b
 13 68078b07-d16a-8568-a820-ef5fa8c57fab
 14 8c9910f7-f07d-6c0d-b758-7c27c1da4887
 15 a0d46070-1db1-368e-b2a1-5f65315c9deb
 16 4c3e8352-f471-1bd6-bf02-e0b47b204b9c
 17 b556bbad-d3f4-8778-80a4-1858660c501c
 18 a15053a2-f418-312d-b55e-ea9d231e7738
 19 7e9b4578-b19a-0ffa-a70f-e02ef4d814b9
 20 14eb0491-ab64-0fe8-b349-e92d46d7b881
 21 60acdb36-30cd-3964-90db-6b7cc07812fe
 22 14ca136c-56f9-5e0e-aecf-826710de49e0
 23 3ae530eb-22f2-331f-a90d-094ed67a8117
 24 516f199d-4d19-5f35-84c6-a6bd72037c19
 25 390a2c13-e6c2-520e-8017-7dbe3eaa45a6
 26 560a2245-bdfd-6a62-b450-f4f308b4a52d
 27 8fc26ebc-61a1-1bc3-bccd-0c57624e1165
 28 d17de074-5273-06e6-97b7-3ad027f1392a
 29 1565f0d8-9a2d-2caf-8140-1aecc629f7c9
 30 b39fd4a7-1214-418c-96f9-e2e071385dfa
 31 47671a2f-46ce-8dfd-b121-599f9f494f7c
 32 6f2e4afd-ce3d-13da-8517-6e09451290fa
 33 82723916-2229-356d-bea0-22a15337311d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 330131460058863183003535561024813. Exactly this sequence comes out of new Random(162).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 15 of Run 27 (seed 1,337,299,625): new Random(1337299625), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:07–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results