201210021540 10tzhd

explained decrypted filler

3DES(name+title) ECB, 22 GUIDs, seed 943

Metadata

Post ID: 10tzhd
Title: 201210021540 → 2012-10-02 15:40 on A858's clock
Posted (UTC): 2012-10-02 19:40:28
Timezone: UTC−4 · title 15:40 against posted 19:40 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,424 hex characters · 712 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210021540) = 524fb43c1a3b79164f7ff8ec20b7296b (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 22
Filler GUID seed: new Random(943).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 35 · predicted N = 22 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,424 hex characters = 712 bytes = 89 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210021540 (name+title). Key = MD5(password) = 524fb43c1a3b79164f7ff8ec20b7296b, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 22 GUIDs as hex (shown below).

Decrypted: GUID list

  1 97a84ee5-43b1-33b9-a3fa-04fb74f80744
  2 dfec3b0a-daa8-4b47-8e7a-da5c552138a8
  3 14fe9718-2a42-882f-89b3-e91592f14f3e
  4 b9055a37-1833-7801-a4b2-3b627682f414
  5 bbb18f1a-4ddc-827b-b52a-11378b98a8a3
  6 dd1206b7-bbbb-571f-aca0-a34c056f671d
  7 ad4a8df4-f794-3a12-805b-3e1ca33f4053
  8 41ab2ae0-9a19-4e3f-994b-67a58e225b70
  9 c3876c4a-373d-57f4-8a33-6495d81d489d
 10 2ffe9fe2-cd1d-092e-ac99-6c7175492404
 11 510d1c92-8cb3-0094-9114-bff9bdd30d0b
 12 1c6132ca-fa1e-62a1-8d40-e34d78c9b722
 13 5ce72add-35bd-8f6b-aa3c-e78daaf148a5
 14 ab643926-063e-0268-bc99-566076063ae6
 15 005cbe9f-f4cd-0816-a7e2-9e66ffe1719e
 16 2c149c14-e9dd-8cab-b5d4-2a5fa3384f01
 17 75f56325-9776-2757-81bd-f2e3343c91c6
 18 498f000b-56fe-505b-9522-51c11f399b8b
 19 36ab824d-93d1-11c4-afbc-05fd77ff3ec2
 20 790491cd-344a-4283-b794-2d0883e53fe9
 21 02fc4435-c34d-155a-a14e-ab60f8da6c40
 22 dfc9b923-feeb-1a13-9f29-52d751dde6fe

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3487853450068008251411. Exactly this sequence comes out of new Random(943).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 35 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 22; the post has N = 22 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related