A858DE45F56D9BC9 archive

201209042300 zc38r

explained decrypted filler

3DES(name+title) ECB, 31 GUIDs, seed 650

Metadata

Post ID
zc38r
Title
201209042300 → 2012-09-04 23:00 on A858's clock
Posted (UTC)
2012-09-04 14:00:52
Timezone
UTC+9 · title 23:00 against posted 14:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,000 hex characters · 1,000 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209042300) = 2398d2dd618b76623f9cd8bb43443f1d (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
31
Filler GUID seed
new Random(650).Next(9) ✓ verified
Run
Run 27 (seed 1,337,299,625) (seed)
Draw
66 · predicted N = 31 ✓
Machine boot
2012-08-15 10:07–10:24 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

70DE44324037F0C3 2B85DA09129A0C2A 88BF81E2ECBA79BD 55CD7983CF67FE35 9CD480404C42D0D8 B20E9E6D877C71E0 171B269AE9A5037D A4DCE2D80E3D1FAC 5112E865D632A5D2 2F877F8FFCA36C19 E5C13DC84FBE041B 4DCA463273FCE3A7 82A7295CDE861BA6 8FB67730274935C8 496683F49203410A 15BC871051DDEFCC ABF6CB15D18FE2CD 432B744D1A6D3C4A 7598EF95C0092A80 46BC4794E70AD334 346F3859DCC2F06F 759F37AB61ACA3E2 AEA8C8E3365F4F0F DDE03C276229F807 CEEA42333AAD8246 FF130A9318F7003D 78851D0E9DE4403E D9424DB00D3B1A99 CFF3B5BEA57E26FD 74B7D390F5997A8F 6920F2D693C642A2 63081E351A9AAD11 7040C3CAAA36BD11 EF099B8DF23DA970 73369AFCA0BAB88A FF66891391E4CC94 7CE4A628045652B4 53D7F69E60595D47 B2A4EE174C283BA2 245749F61F176CA9 966D7CF501C0E686 CD301970FE02129F 6C2973A8646EA7C6 7EB3348FF6641F2E F459B4D0A62556AA 0C81DFC20DB32BE6 85BE40A08C4F4C4E C4A5A9D0DC7C6B60 C2E41A90DA82DEF8 96E110DB83FA69BE 13F20A152D819CCB 9040726D775D6441 D17C5756CB1CD3F1 3066680ED81A2F72 4E6BE7BD8DFF4663 B3B4DE2947202122 774085EC4394E02D 45809DCDB6250D8D 4978AD33B2F859EF DC54AF87DCEF8C59 D264D8140792CF05 93B054E7B3783615 E3F69CAE02C7A885 4928089735B6EEF4 F8AC6BE1761C61DC 4B086D57F7A9DE9E 3C9DE0810901522E AA096DBB50FE9FBF 1C5AA5471FDAE4BA 6C744D66E6B1CDEC 4EFFCA1E5EBB3F41 381CF63E73A32CD1 781A2242FF737A78 53B76EAF9A9FC4B0 73900F7AF127D24E A65EA1862E9D4879 5C12BDC4059935D7 01A680DFCC2CAD8B 19AB9AF05FF51D10 51E95EF5F610C08F 32294402BAE6B467 37A3C47E5B3D1458 499C38BCC359A253 B72AF50592FA4142 FF5F7A54D464DCA5 01090209B43C05C0 34CE747147D29452 36B71A53A4034934 ABB0983DE7528127 C73E36F7525370AA 21941554AE8DDC33 FE9A8A1E4199F1DA 6C33A928673F89B5 CCD3404FD8BED143 70D5F389C042AD6F FFCC8D962CA58D93 866EA7BDA9DB0BD1 0EE2361A8232406F 43B0739B4BF9B844 448AED6437FF1707 8330538ED3C596C5 9D919D70620CFE7A 2A82844D77E5E7F4 1D8F340877F860A2 3303FE589AB88F9E CCC35B970A9C6869 957353E7D7A0DE5C 1338B5691F6909D4 CBA762BD8EBA6CAB EA5A3A6876287391 245FF7B43353AFE5 292F7E7EC1EA2C27 85BFF2F26E10375F FCFD985C50793AAF 14B44A97E50A998A 329E505B6C485D00 6BFA7D4495139F40 CC90C6DB0FA41515 E8C615D68529B790 02CFC1920B0CA9E2 55FDB2DD2877FE8D 720ACD8419790019 22A2413F360B63D7 7E04062F0423482E D07E74F2BA5AA8F9
  • Read the ciphertext. Strip whitespace: 2,000 hex characters = 1,000 bytes = 125 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209042300 (name+title). Key = MD5(password) = 2398d2dd618b76623f9cd8bb43443f1d, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 31 GUIDs as hex (shown below).

Decrypted: GUID list

  1 141b6763-d1d4-289f-a6a6-ed8220e15f1c
  2 b17d52fc-9078-474b-b3c0-c54f3eff61ca
  3 ab7afdbb-b768-002e-a2d4-31a7266594c9
  4 504ef970-8099-21df-9f8f-43a60158b2e3
  5 6d72e4a6-3e45-6549-9f24-501cb7a1d93e
  6 3c66ce4f-41d3-5275-b56c-8c734ad66078
  7 de5550a2-fdbc-165a-ab8b-87ee453c36f4
  8 ab275d1c-d730-494b-bb91-f1e8a17f7019
  9 943d29f6-ffb5-3001-9a2f-111df6fa0a26
 10 e14d477f-9969-8216-b7dc-63b07d5797d3
 11 51d8cc5c-5225-1a5d-854e-65c2da599b8f
 12 a6735b95-2c14-8d79-a312-016eab379d1e
 13 238e9b60-40ba-4644-9021-6d04db45bb1a
 14 dbb5dc2e-b9d5-554f-ad2c-05770d62a26b
 15 0ec998f7-7bfa-8ac1-bcd7-f0f1862a0c0c
 16 6248b5a5-5818-8744-99e9-b86847172be3
 17 04eec206-ea5e-09b4-aa3e-d0c466be8672
 18 b956f4e2-db1a-8113-8e9b-3fc79569869c
 19 b2da3c7b-916d-2bab-a45b-388233aa4525
 20 8dd45e72-e47c-8354-a464-ddfbf921c5ca
 21 7a6cd601-98ef-1d23-a4ee-3e6350f7691b
 22 dd49ed36-2550-2004-aa9e-b5d3aba0ceeb
 23 2c09f8fe-2d35-75a3-b068-b30005c7e5d5
 24 7d9a4efc-a45c-0cdc-9282-a88ea96842e7
 25 66254a17-d76b-3957-bdcf-6d90033896cd
 26 00699c50-e981-5df8-be45-d1884a089852
 27 57634aa9-c1cd-7abc-8527-70c9e6f2974b
 28 a62c46dc-44c7-398e-835e-7e81ea7dc68b
 29 04a3f056-e350-06ad-bae0-108aa9d99340
 30 34b1973a-0d22-5280-9e67-51e822b85fa7
 31 c19da52f-92f6-13d4-b321-3de9330cb85e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2402651438184588082812703573051. Exactly this sequence comes out of new Random(650).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 66 of Run 27 (seed 1,337,299,625): new Random(1337299625), Next(8,64) per post. The RNG predicts N = 31; the post has N = 31 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:07–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results