201210030000 10uwer

explained decrypted filler

3DES(name+title) ECB, 22 GUIDs, seed 853

Metadata

Post ID: 10uwer
Title: 201210030000 → 2012-10-03 00:00 on A858's clock
Posted (UTC): 2012-10-03 04:00:57
Timezone: UTC−4 · title 00:00 against posted 04:00 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,424 hex characters · 712 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210030000) = b3304b94d26dfbe64ad7c4668100c51a (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 22
Filler GUID seed: new Random(853).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 60 · predicted N = 22 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,424 hex characters = 712 bytes = 89 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210030000 (name+title). Key = MD5(password) = b3304b94d26dfbe64ad7c4668100c51a, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 22 GUIDs as hex (shown below).

Decrypted: GUID list

  1 6debfce6-001d-3af0-b6ce-0ad6d89c32aa
  2 2a7a4e93-e8f2-053e-b510-700836a9927a
  3 0262c9b8-58b0-05a9-b6a7-a1cd0ef969cb
  4 cbf6bb84-52a8-57a6-ae0a-c921cdcef0d0
  5 de916c42-12f9-2fcf-99ff-3b81750636d8
  6 6dc682f3-566e-8c7c-9534-f000ba8144a1
  7 22d6c745-2223-0f1b-865b-dbcb66b25dee
  8 413b427a-7272-3943-a1a9-11fbf51a3a91
  9 f42ec95a-bdc2-466d-8863-a424e721ad77
 10 1d228b78-8c8c-77bb-9231-0a12f7d6be1c
 11 8f2ccf61-6e72-6e4e-b24a-f075de6e36d2
 12 f1223b92-29e5-3e83-a615-8855b2e09dd6
 13 ddb081ce-680c-0651-9e23-373368a3d883
 14 f22c0a5d-8e4a-21e7-b897-19747dc5cb23
 15 aa5450a6-1b51-0ac7-8a10-4ee46ed76b67
 16 732036dd-7443-6644-8797-0d666d6368e0
 17 0ba40f95-fbb6-3bd9-822f-6b37f346e7f1
 18 e45edd32-0b19-778f-926c-44e886fba1b5
 19 a241b007-a3c5-6931-b09a-a45b039152d4
 20 ef1e3ddc-221e-5d69-b0e2-02247dfcb380
 21 375f5353-672f-1876-a90d-5cc48dc83b1b
 22 939a8fd1-5439-1ea5-8e9d-8ee3190d5d0b

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3005280347630206376511. Exactly this sequence comes out of new Random(853).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 60 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 22; the post has N = 22 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related