201209241248 10dk5z

explained decrypted filler

3DES(name+title) ECB, 24 GUIDs, seed 58

Metadata

Post ID: 10dk5z
Title: 201209241248 → 2012-09-24 12:48 on A858's clock
Posted (UTC): 2012-09-24 03:48:39
Timezone: UTC+9 · title 12:48 against posted 03:48 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,552 hex characters · 776 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201209241248) = 899cdac03f71566483f8d5b67085d34b (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 24
Filler GUID seed: new Random(58).Next(9) ✓ verified
Run: Run 34 (seed 83,105,000) (seed)
Draw: 184 · predicted N = 24 ✓
Machine boot: 2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,552 hex characters = 776 bytes = 97 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201209241248 (name+title). Key = MD5(password) = 899cdac03f71566483f8d5b67085d34b, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 24 GUIDs as hex (shown below).

Decrypted: GUID list

  1 42fb4726-a11b-068a-9b4d-e7fd34608c8f
  2 cbb2d442-9d2a-795b-bd59-cba6ea906b4f
  3 e5a3cb6f-1114-2041-837b-76d9503722ae
  4 7e55f531-f1cf-8014-aab4-09ab2836baee
  5 b1afb76f-ee92-3fd9-9551-280550314c6e
  6 dd1f3f53-e3aa-2cd4-a041-ba93b90a0b1f
  7 41dbfc87-283d-854d-9622-5319cbbf00ea
  8 f5d963a8-665b-453a-921e-0fb841a4369b
  9 e71ccb19-3eba-14a2-98e9-c33396686f15
 10 5d788859-1e98-5f00-9153-d739cb4903fc
 11 9f77ee7c-b00b-04d3-afbd-9d530186e962
 12 1117de00-8702-6e6b-95bf-9982ba5a60e1
 13 80756c0d-2262-47e9-a4e0-9408d4ceef23
 14 162c417e-c05e-5060-b531-ddd002f610c2
 15 7ccde405-f585-5ddb-8d52-2b1b9945b091
 16 9ba76217-b17f-297b-bee7-8fd98c498211
 17 0c02c0c4-7de6-2811-b69b-2a2dbe7abc6f
 18 2cb612f8-7d42-81a6-bb2b-2a1af06a3fd3
 19 8348a83f-5a01-2c8e-886d-bacd7ef127cd
 20 3869fbe8-4fda-6414-be51-89da6a3c5de9
 21 98057ab2-6bac-4f09-bb6c-990f1c29c0b4
 22 59f48069-3176-096c-a688-4f28996149f1
 23 effbc05d-c08d-7365-96b6-d2393e9d64ec
 24 2a265f9a-2cc8-2bfb-8778-bea299c624de

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 072832841506455228264072. Exactly this sequence comes out of new Random(58).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 184 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 24; the post has N = 24 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related