A858DE45F56D9BC9 archive

201209042130 zbzcz

explained decrypted filler

3DES(name+title) ECB, 26 GUIDs, seed 108

Metadata

Post ID
zbzcz
Title
201209042130 → 2012-09-04 21:30 on A858's clock
Posted (UTC)
2012-09-04 12:30:45
Timezone
UTC+9 · title 21:30 against posted 12:30 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,680 hex characters · 840 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209042130) = f3cc44732106bce632da097963c67549 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
26
Filler GUID seed
new Random(108).Next(9) ✓ verified
Run
Run 27 (seed 1,337,299,625) (seed)
Draw
63 · predicted N = 26 ✓
Machine boot
2012-08-15 10:07–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

85D8F493C038716C 56094F0BAF1696FE 483A016659A7558B 0359A6111110A9DC CB60DA94BCA23157 D315CA9A5F2FE0A3 D0F487E2F3724363 E67388E75FF82665 B9172F76AB648065 6548BF18FEAD6377 45AB18EADD383080 DFA50BB4DE9EF8E9 0103EDB668FB1E1A D69685181E109AC0 E66AE6894856E0AE 4AFD9AB42FD4EFEF 02EB832EAB036A22 21A344C8DD965B59 4D01F632499BB335 F5C7B7F151CFD8E6 81B03B49566FBA47 57DA5A6A6B769CB8 CBD4E026BE7836A0 D5B97BC843C39461 A9A9465365BB9E34 70DC2EA6FA90729D F6DA22AB75F36B4A 18A449966BD6C816 448538A7A05E31E4 86FCEEC39AF2977B 255B854E401D5FA6 655DAC8700EA80FD 0B6B65F05AA9D420 4687C8EBC2F2146A 0E45987FE2BF8CDD C270DA1B741913FB 7B898480D06825EF 31E95E84B8922655 C5C14C18937169C1 C0FEC43615D52271 82C6DD6E0E83C34B 7205D7CD91F7D523 023334FB35F4FAF4 28F2FDF87D805CD1 B04093346A7A2DF9 49A26759780B226A A137C3DE2245CFFF 5AB30468D91D03E7 CC47F6AB56D8D3E2 F4F2CF1C77556BE5 3DAE409E1D3DD5FC 18BE285F263DDE50 AEE22277E2A0898D 88F394195E38F31A 194C0FCD3CD92050 94E420BEFB227718 FC2E30A8950D616F 5F1BCCACA44FAEEC D056803C844F2B17 9CDC822F3D755E5F F0040082E882A0CF D717777FCBA78BD9 1D281DDB574023AB 8CDABA099EDE52C3 AF82064CE0F71447 A2FD34719B00F718 D16A48AD14841859 2DBF21A136B46C96 AD6A2450961C7529 4CEE936C6B859FC9 AC07544B934866E1 FC334B50BA8FE54C 2BE3F06458DC9FF3 38EFC62773A2EFB9 F224D17D0F6ADE70 312F010CC6EC7124 7A2A01F3C31B5D3A EAA20A55D9F40B4D A8245E8EC074FC5D A1E11A118A56E5CC 2DCC4EB95AD6F41B C737445004E7659D 6C3B920DCF4983AF AA4F92A226BC26A8 C6BF1F03D81028C8 556C36567178C05A F73C98B572E868FB A995D8B1F5D67986 95067AE0D272E0EE 781429DECFBF699A B717F9E97989FAAE 03B6ECBC49828EA4 57FCD64CDBDE969F EB4F74C50F114580 AA577C1EFA780B5C E25799B300482EBF F6A88881030D139F BD1A6D087BC535E3 5CB1A9F0CAB3A5C0 DD654B0D4589A4F2 E205FCFA79E2F9BD 548750F0F9AC3520 46C0E9D21D47E96B B39736A57E1D4641 C1617517E1978302
  • Read the ciphertext. Strip whitespace: 1,680 hex characters = 840 bytes = 105 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209042130 (name+title). Key = MD5(password) = f3cc44732106bce632da097963c67549, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 26 GUIDs as hex (shown below).

Decrypted: GUID list

  1 35884e35-696c-1d64-9544-e3559b2e143b
  2 e032f614-f796-46e4-92e1-ecbd5be9ca94
  3 f8f0587c-e038-2103-a48f-f3cc3119f1f1
  4 700987c4-f67d-5420-843f-4de8e77c01dd
  5 92937df9-8f73-88d3-9e3f-5462d98de251
  6 8bcb64f5-b34a-8c81-bfac-972373642696
  7 f59f8019-d776-2997-b56c-c5045f3c75c7
  8 edb7a2ea-2a57-5ba5-a07c-28e41d13bdb9
  9 6ceab7df-bcf8-329a-a35b-817ee0519f40
 10 a53caa59-f506-0e7c-958d-7ab0d140799f
 11 82797509-7398-7b04-817f-14967da237c3
 12 452b46a2-c258-7ee9-aa6b-af011ed46687
 13 e0038251-bc14-74c5-9a8b-75d2954ad9bf
 14 d48208a0-efe5-5fbd-89c2-1dfb0712ebe5
 15 d6da270e-1475-550d-a34b-625a3957fa47
 16 3231a9ad-5aa8-43d1-9b89-497fa84ad98e
 17 b7550539-7df9-2531-8022-173d634f6260
 18 a9d8d1e3-3676-8485-93d2-bc6b21f22c1f
 19 c55b83b7-c068-5222-a835-940c54e57b4b
 20 f65b4452-e4cd-1717-8485-7a9c21da0cc6
 21 20fbc550-e596-1fda-bd19-85b1c9d80368
 22 8fe9951f-bbe3-38fe-a048-1cc64a15bab4
 23 10231234-ae8f-236c-a87f-4f369cf242f4
 24 2aeffdd7-de5f-6d6b-bc5e-06df003513f1
 25 1d55cd4e-f46a-2d3d-b452-df9b1e0c354e
 26 066c9ec9-39da-81f6-978c-47ad1cc9d3f5

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 14258825307775542851132628. Exactly this sequence comes out of new Random(108).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 63 of Run 27 (seed 1,337,299,625): new Random(1337299625), Next(8,64) per post. The RNG predicts N = 26; the post has N = 26 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:07–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results