201209231305 10cind

explained decrypted filler

3DES(name+title) ECB, 26 GUIDs, seed 864

Metadata

Post ID: 10cind
Title: 201209231305 → 2012-09-23 13:05 on A858's clock
Posted (UTC): 2012-09-23 17:05:08
Timezone: UTC−4 · title 13:05 against posted 17:05 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,680 hex characters · 840 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201209231305) = af64288912c22c27a0ba4338aa01f5a6 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 26
Filler GUID seed: new Random(864).Next(9) ✓ verified
Run: Run 34 (seed 83,105,000) (seed)
Draw: 23 · predicted N = 26 ✓
Machine boot: 2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,680 hex characters = 840 bytes = 105 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201209231305 (name+title). Key = MD5(password) = af64288912c22c27a0ba4338aa01f5a6, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 26 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5e943d90-73a1-081f-a181-f7be774e9db5
  2 67989e50-ef57-27c9-aaac-3059ae478f1a
  3 651d7a58-e539-6109-8a6c-88491136d333
  4 49bb43e4-d208-8bac-b61f-b321a3948fea
  5 18a993d1-8070-20ac-aa6e-d2d077430280
  6 f81cb8b9-4e9e-50ad-a8e5-c7a0b9353804
  7 186eb867-444b-083a-bb6d-449f3ba110f9
  8 bbb114c1-90f2-8362-8e2d-ec5ce2404882
  9 06c84e3d-c8f7-73d5-8766-e79434ddb84c
 10 0f1e57b7-4d1b-7d98-8171-3d5513d7a426
 11 2be9e278-680b-7eda-a942-d8b8ddcf2d15
 12 67608a28-530e-0839-84a5-f8498cfb3d75
 13 c7239a9e-39d5-5aaf-8ac8-b457b710e9ad
 14 f8483fc2-7116-82ea-b086-2a56a503a078
 15 a72c0d8a-6c49-6603-a1ed-3fb4058a24e3
 16 bc984eab-0d6e-5b10-aa51-16608ef94011
 17 4d059464-1349-08bd-beda-b6bb7f4ff382
 18 ba2766f6-1ea4-6ea1-8985-acb9f8fa866c
 19 dc41df50-2b8f-05c0-b36c-62b49bf6868e
 20 46238623-359f-7bc0-b0e3-a50f9a6d8c4b
 21 31b273bb-ba87-5a04-975c-eaf284099bbe
 22 f780ad4b-4d68-787a-a92b-6dc56aa05a78
 23 318ff938-c882-099c-a046-cd50c7418918
 24 f9451303-93ac-7734-8a70-ab2131903d75
 25 54c3150f-3a1c-3312-8ed7-e410c41efb5e
 26 439779cd-d164-20da-928c-a15d4ac44abc

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 02682508777058650607570732. Exactly this sequence comes out of new Random(864).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 23 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 26; the post has N = 26 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related