201209241410 10ej19

explained decrypted filler

3DES(name+title) ECB, 25 GUIDs, seed 117

Metadata

Post ID: 10ej19
Title: 201209241410 → 2012-09-24 14:10 on A858's clock
Posted (UTC): 2012-09-24 18:10:08
Timezone: UTC−4 · title 14:10 against posted 18:10 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,616 hex characters · 808 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201209241410) = 4acfd6a44cb5c4de767544b15e56a310 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 25
Filler GUID seed: new Random(117).Next(9) ✓ verified
Run: Run 34 (seed 83,105,000) (seed)
Draw: 235 · predicted N = 25 ✓
Machine boot: 2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,616 hex characters = 808 bytes = 101 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201209241410 (name+title). Key = MD5(password) = 4acfd6a44cb5c4de767544b15e56a310, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 25 GUIDs as hex (shown below).

Decrypted: GUID list

  1 f1c94283-5834-7629-8fa9-169efe36899d
  2 08cbe3ef-40d0-1fbd-9b9b-e78fe72daaef
  3 f7ff5981-e194-4e4d-94da-e55dc47e9c28
  4 d6a5ac1e-50fc-4a78-adff-a7877f7f02a5
  5 c4b639ae-df15-07f6-8b48-e17efc9184dc
  6 ce453e29-d2bf-7bf5-be2a-a46440ec1eba
  7 74d9ed2a-deae-2053-8912-54e3d3cc75b0
  8 fd300bd2-9422-1e22-89f1-0e1be13961eb
  9 f0475e15-e64e-4030-88c2-6cc068ac86f0
 10 aa69ca33-d9b4-3a47-99bc-1ba264fba08a
 11 cb2e08fc-c942-4d1d-864e-a5c7c1098824
 12 6735fa63-493d-7430-9f65-6dba47c61cb3
 13 29ddf693-d41a-0d2d-bc17-b32d3a13cd91
 14 6e700f22-146d-3bfa-86e6-82f94476ad07
 15 cf04cc0e-ad14-7359-98f7-465c54a842bf
 16 fab089d8-f83b-0647-a6b3-5d7d18632aaf
 17 f32ac74e-c889-02b3-a9e2-56d8e104de2e
 18 c641e826-6013-4b33-b34a-cc17498e2a41
 19 487b9951-376e-791f-9761-7171dde72f33
 20 286bbf52-fdbd-5ded-a434-277b7d373941
 21 5b757862-08c4-3213-b3b9-b200840f8082
 22 28c33008-6123-4c42-8bd5-7cc7cdb3c709
 23 f9bdc608-3ce9-69ea-8174-e49a0235f4d4
 24 676eef8f-0aec-8033-b4ab-ae7df380e241
 25 06557df9-5281-1a31-9282-5e9d7c546cc7

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7144072143470370047534681. Exactly this sequence comes out of new Random(117).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 235 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 25; the post has N = 25 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related