201209241204 10dhlu

explained decrypted filler

3DES(name+title) ECB, 25 GUIDs, seed 487

Metadata

Post ID: 10dhlu
Title: 201209241204 → 2012-09-24 12:04 on A858's clock
Posted (UTC): 2012-09-24 03:04:07
Timezone: UTC+9 · title 12:04 against posted 03:04 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,616 hex characters · 808 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201209241204) = 87b2109e2f8ba9631c6d06d55707bbdd (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 25
Filler GUID seed: new Random(487).Next(9) ✓ verified
Run: Run 34 (seed 83,105,000) (seed)
Draw: 140 · predicted N = 25 ✓
Machine boot: 2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,616 hex characters = 808 bytes = 101 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201209241204 (name+title). Key = MD5(password) = 87b2109e2f8ba9631c6d06d55707bbdd, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 25 GUIDs as hex (shown below).

Decrypted: GUID list

  1 56edc05e-44a2-1f73-9320-f7981fdd37d2
  2 e8c87baa-36e8-67c6-9c36-ce0803f204fb
  3 6a500750-dd62-11e4-8da7-9890d543daee
  4 55b88816-9dd6-4a7f-8f18-692d9277d21c
  5 6fd8f398-9020-05f4-a19f-329c20c27568
  6 69fe4ed0-112d-1dbb-a44d-b4e042c4c700
  7 8a86d0bd-8e41-047f-b58c-6a0e1e42b49d
  8 4ac9df7c-2c79-6fec-980f-ad62f3579d10
  9 728c5240-4927-20c5-a2ac-ab7ee4f014b7
 10 6eaad4d8-5ccc-7e55-ad81-8cb0f8cbed25
 11 f28496c8-788d-0b80-bbde-08aaf858a185
 12 06229317-459e-6fd2-ad44-1cf3e118da0d
 13 96178ee0-27da-3965-871d-9c41a389d2f3
 14 133c4e0c-9404-79fc-925a-31a8db5cb293
 15 284168b7-2a3c-78bd-a396-715625ceb932
 16 704927a2-53c5-1733-81db-9f86d4ca0ff5
 17 a4309f07-728a-5395-a0db-1f806eac847f
 18 46ca4a98-4d28-8cb4-bfb1-d8a85102b6b3
 19 916e1f14-940e-79af-b611-6272918a0e06
 20 710bc411-b3bb-7e28-9ab8-5f411993edf2
 21 5d0340c1-25b4-48ac-99c0-0ab6ee87ff52
 22 f36bf2ae-6e80-20bf-b253-0a6a47b21e3c
 23 7ce1911b-f09f-2d10-84e4-69cf7c64f912
 24 e9f593f9-6632-1471-8915-056efa027cf9
 25 3cfbfc8d-59bb-3e1d-aa4c-3265583f95f4

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1614010627063771587742213. Exactly this sequence comes out of new Random(487).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 140 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 25; the post has N = 25 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related