201210021840 10ubnu

explained decrypted filler

3DES(name+title) ECB, 24 GUIDs, seed 390

Metadata

Post ID: 10ubnu
Title: 201210021840 → 2012-10-02 18:40 on A858's clock
Posted (UTC): 2012-10-02 22:40:38
Timezone: UTC−4 · title 18:40 against posted 22:40 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,552 hex characters · 776 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210021840) = 941a58465afe84a126fcfdb0d31a8e46 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 24
Filler GUID seed: new Random(390).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 44 · predicted N = 24 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,552 hex characters = 776 bytes = 97 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210021840 (name+title). Key = MD5(password) = 941a58465afe84a126fcfdb0d31a8e46, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 24 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a6ea5920-abba-462e-867f-a8a0066481bc
  2 3a629bc0-d809-2318-9f67-1ceb3b93e912
  3 8a0e93b0-322b-3af5-877d-91b19b29fa75
  4 73be9221-01ea-7028-8434-a789bcb22f2c
  5 b1e606b6-5a6d-2555-acc9-05d0adfd5479
  6 e175246a-9a83-3e86-8411-264d42a5e0e4
  7 195332d0-fa04-501d-abc8-a310bd18fcb9
  8 5dbd9613-157e-09e2-8c5d-bf2f5eec37fe
  9 f990bd90-0c92-2270-b82e-6edb35d209bd
 10 83fe0ffd-2a04-0dea-b03b-d9ec3c822d10
 11 ee81989b-ecfd-51c8-a94c-700d1c0e2ffb
 12 e57d1d61-7407-8662-9bce-2640cd7cb582
 13 9b021fe1-193e-6c5e-9c58-c2bec8bb2e3f
 14 7c55b338-6282-3790-a54d-271a6240ec6f
 15 4bd063f2-6d90-84dc-b87a-2ddfdfad4862
 16 560ee0cf-3959-573f-add9-3dcd9e635bc5
 17 8045b98c-72ae-7f28-acf5-102f6672422e
 18 f5bbe32a-d813-7399-86b5-3f906fa3ad26
 19 31549c1a-7abe-2b26-b295-ef08afc06d7c
 20 fb309043-71a6-2ac6-9eba-808095e4e632
 21 b7685c74-7287-5abd-953b-3eb1d3600787
 22 c06558d4-9fa7-4070-9518-7b4b6ffe9fae
 23 5270b6ce-3e89-8309-86ed-a1014b176809
 24 70b489c2-45b4-2a52-8830-db40d19fd65b

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 423723502058638577225482. Exactly this sequence comes out of new Random(390).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 44 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 24; the post has N = 24 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related