A858DE45F56D9BC9 archive

201209010709 z5p8i

explained decrypted filler

3DES(name+title) ECB, 40 GUIDs, seed 227

Metadata

Post ID
z5p8i
Title
201209010709 → 2012-09-01 07:09 on A858's clock
Posted (UTC)
2012-08-31 22:09:03
Timezone
UTC+9 · title 07:09 against posted 22:09 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209010709) = 9377241e93cb3cf5bee081e60b128bd6 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
40
Filler GUID seed
new Random(227).Next(9) ✓ verified
Run
Run 27 (seed 1,337,299,625) (seed)
Draw
24 · predicted N = 40 ✓
Machine boot
2012-08-15 10:07–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

9B9B3622BFED31A4 2534E9E5F3144B7D CD3BB0ACF4801FD7 E4F6068B42E24AF3 721CE05AB5A04082 A97BE379A2E44301 011AF8A661AB9703 DE1EF5F4422D7406 1213E7160481E174 84843ADB63246C58 9E0E5DCED4231A98 C753043B57F73E18 7188419E5930B8CC 2C2DE29A014F640D 529D9DE894988B47 E0B77829ACBC5871 32D7FCF15B0F8BA5 3A146F0DFB36353E E5F23B6D18A5B5B4 4A42003ED40A961F E342CFADD0A65496 56CD59A0C5A87BD2 84C440FF6A6A3567 B2E449212FA3A833 98FBDE1FB19895C4 3D972C0FB7D5308B 67AB18A4FDF1F1DA 6E6A3771184779D0 FCF8EF58E138516A 94948A420CD65C18 F72C6103471D3D8D 97335196A266D9C6 C733B2B8A1990B3D 7125DD97B7E6F1D3 9B85119EA564670B 442CF9D63B67F379 F9B7FFCEE593EB56 1FC6E7D4AFDC6748 6B4ED712BBDC975D 3D89E63C00715A24 E586CA672D2D2FAD 29DB1F9B4BD1377B 04EDC9DF5B1A72DE DD7AB8B3327BAC33 FD570D09E0882898 5B0957BF0070C2CC 8B00F9EB310F2D33 A78B997170BE48D7 D7C77270F3E6264B AFC182C62CF2E38B DADB45CCAF22377A BCBC023A9245C8C6 9DCD8B93FA5453AC A24B43066353AF63 600D6592BEA1FEAD EB9C004B2E8E0603 290153A75C5AF3DF 6AD617815CEEEF58 51A5AC6E73827E55 68EBA0696E642E75 D254DC5259001750 D6D2E1D70893456F 7B03A0D4D70EA6AD 2CB47DEEA17DF865 2FF89DEC3CCA6F57 B766AFDFE47EF700 1A604351D3F62D54 E5D83468C6337A3E C52E3D4A664F272D 6955128AD26DBB38 21C5319BC7B860A1 75845C5AD58F8385 7DCB03B797046A5E F8D3AB95266E8DBF 47210CB5A4327913 D8B4EBC388B13B8E 8838D8E45D741055 C0ACA6C0036841E3 5483B91D75CEE696 A8D85A4EB147AF80 A0657D769321D795 03F094DB9A65A9A4 8297CCC4BBD71743 CD2E0C0EC4EB3941 A6220D9005B2EEC0 CD7144323865E77C AA4ED214B9EBF67C 50358B3C288F858F F807126DBAF03BF3 6C5EB142B546E710 38C4A5D6E8C859C9 409AC0926AD2E4F4 159B291E484ABAF9 DEAD92224F149029 6F462BF216FE08D1 2F3C85E22FECD408 2EF3160C90491DE5 6CFF9955D3F15F01 FEE57D850088C486 ACB4623D5041D3F6 DDA044D37BB76D0C B575A3080E4B0941 F4A68AFAB76C6176 CDD99588BDBED5D3 DD5D53B32FB06129 3A6CF4C9F9945A67 F7ED4EA98DF3A65A BB3B8F3C7A041F9A CC1A021CAFF8BD0F 6DFF1B7BA90E1477 1AED9E4EE33F0421 0F338BE1680EB82D 230AA2AD3AA9E33F 0C9CC67842152B69 0554788B80508702 06EDBC2D0FBEBA15 718F9B4CB6EB52CD EC1C5BC02B5E241A FD9882803B86FEFB 65F5A9866F76BD78 049912C3BADFCD16 294587475B44AB74 0E628C4C35C9C88F 6156A86A5D1C751C 803AB6D9C113DA90 540F7DFD4A04CFA9 C61A4CB48312EC33 14CFDC4F9FE2EFB0 2D132D7FF92A9B66 6D89AF0F77B510FB E08E755DD92F2A0F 5E5AF8B19FABCE6F 4B08FE78F3E47E8A FCA3C1E268881E0A 5F772C5302F76A25 D13F7DC22B30FF01 49B059DDFD1103C5 69912BFA904D95F6 7AC88F5BCF5A99C3 B6C656B655E7E43C B011BB5CF687B5CC F605CA6C6A22F3CA B37A164D859BD59A 99D74063CC08D110 C5D7D07E44DF045F 1C41F64CC94927B3 613EF5CB730853CC C2B0047B73667E34 EE89404B1288A43C 8009CD66FE9B9F47 BED7BB3635882C82 23C970F365C30E3A EBEECD62A452321C 04A62DE05F0BFE5C 34507B0FDDECB41B 98FB1BED5D6B5E98 F4B8B2CF40465536 F6B5D005F45D2D0F A16D5138BE69450B 1452367F7B65C094 C674BEB553D2AE37
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209010709 (name+title). Key = MD5(password) = 9377241e93cb3cf5bee081e60b128bd6, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c951e062-b77e-2713-b3f5-c8fcba4da995
  2 704b949a-025d-37e7-a77a-819e3e36ef69
  3 dc5a59b5-9632-3fe7-8bdb-8e9573ee36b3
  4 d59f9b13-77b0-04bf-b5ab-59a241fc47c9
  5 13255468-2612-6d75-be89-70f5f8775edf
  6 f05b9b62-6a5e-8290-9dc6-ba4fd667f14a
  7 badd81ce-1ce4-598b-8824-c4e8cd7e93ca
  8 7d76a44c-9402-21bd-9499-e605d0088317
  9 36a7e88c-a3ef-0ac7-9d1c-80feea7f9f71
 10 f2967e69-1f9f-8716-b891-e771585272c2
 11 16621ec4-7c68-46b7-b242-da07d618d276
 12 d5b3b8ce-3f2b-6762-a6fc-4b8d8ddd3fdb
 13 c757e2e1-f879-6668-9a62-c5c2092f14b8
 14 840fe3d3-966f-56a1-badb-65fe3a11fbce
 15 93c7af74-62fa-733a-b797-f08b9de184dc
 16 c1999ec3-b159-7c79-863f-029b2dadb0be
 17 1fa2fe3a-9b50-2424-bdb1-5381ca7e4a58
 18 3f46136c-9432-6074-9e9e-25b52d3361f7
 19 f6e750db-d5c7-76d6-908c-620be50fe7eb
 20 8c6820f9-76a9-1cda-b835-6f760cbc31c4
 21 391dfbc7-1b68-8741-a6a2-3fccdb186cd0
 22 9444ecc1-1530-48d9-8e7e-10b3baf9178f
 23 dd0a9ea7-a469-3b17-9d01-12b9f8c86331
 24 e15385b1-1ee4-3f56-844c-329b49482926
 25 2e4f8056-c7f6-8a03-af95-a1bf10840e75
 26 7586c262-7634-411a-aa8f-c5f3ba5c0242
 27 9ba9f6d7-0558-0096-9245-ad9856df6275
 28 7d42bdf7-d925-34ee-972d-1babef78af03
 29 ff39d93f-9f70-2375-9cdb-e25e6af3f074
 30 52f23711-b204-88ef-8fd9-61f2f8aa914a
 31 d474499e-711d-8b77-ad34-4f29aac73d78
 32 ef57760d-0501-2b8f-b0be-c43e5a759748
 33 ea75e8e4-37fc-56b8-932f-8d120a706948
 34 fc80883c-4687-64a9-858c-a8caefb33349
 35 f8f616d6-7a06-808f-a376-948f3db63dcb
 36 4fa83c4a-5270-50d6-bb3f-bb76de776f19
 37 e7d7e72f-ce98-0d8b-ac20-84834f344a6e
 38 54a05ee8-5185-04f7-81a3-100cbb489c05
 39 6f9f286c-623d-1c2f-844d-c8a1603cc3e7
 40 801fcda3-d9d8-7404-b20a-a6a9fd98ded7

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2330685208466577267184338403288256850017. Exactly this sequence comes out of new Random(227).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 24 of Run 27 (seed 1,337,299,625): new Random(1337299625), Next(8,64) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:07–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results