201209231432 10cne7

explained decrypted filler

3DES(name+title) ECB, 18 GUIDs, seed 454

Metadata

Post ID: 10cne7
Title: 201209231432 → 2012-09-23 14:32 on A858's clock
Posted (UTC): 2012-09-23 18:32:10
Timezone: UTC−4 · title 14:32 against posted 18:32 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,168 hex characters · 584 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201209231432) = 075007736bc4c96d943155f73a3d67e9 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 18
Filler GUID seed: new Random(454).Next(9) ✓ verified
Run: Run 34 (seed 83,105,000) (seed)
Draw: 109 · predicted N = 18 ✓
Machine boot: 2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,168 hex characters = 584 bytes = 73 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201209231432 (name+title). Key = MD5(password) = 075007736bc4c96d943155f73a3d67e9, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 18 GUIDs as hex (shown below).

Decrypted: GUID list

  1 30081af9-4d2f-800e-9666-f108504d591f
  2 1eeaae09-cc21-0b17-be7b-14335db807ef
  3 144c39dc-2b16-0a33-a461-05ab1af0cacf
  4 8aef00d5-cb4b-4a53-bcd8-978526c12cc7
  5 8343ec20-5665-1185-a4f4-3e3b8da9e0a9
  6 f8201a77-2b32-284d-9e57-e6619f239e5f
  7 6f7eddb5-e681-2903-ba3f-ac042b01384b
  8 82834823-45bd-12c8-8ac6-9ec470025d8e
  9 8259ba14-3d99-1f86-8c8f-cdbcd5c18ad7
 10 52281626-1784-681c-b50e-c79caad5fbe2
 11 d5a4e912-5a5d-62f9-a48e-89f503965a49
 12 7e53f4f9-f188-81fa-81e7-bbc1b8b6c1a9
 13 48f560d2-3a55-6284-b3f8-6b1ba6adfda9
 14 44009699-d0c9-5a3d-aee4-6ca1b438f3cb
 15 a11f7fb0-266f-6307-b272-c5445d617a0c
 16 69aa7c4e-6772-57ce-8e65-2b3a70e0a44b
 17 bfd46791-6ce5-6a73-b7c7-94bbacc0bd70
 18 04957ddf-dd88-4b85-8a18-34e9adc63165

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 800412211668656564. Exactly this sequence comes out of new Random(454).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 109 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 18; the post has N = 18 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related