201210030201 10v2gg

explained decrypted filler

3DES(name+title) ECB, 14 GUIDs, seed 364

Metadata

Post ID: 10v2gg
Title: 201210030201 → 2012-10-03 02:01 on A858's clock
Posted (UTC): 2012-10-03 06:01:01
Timezone: UTC−4 · title 02:01 against posted 06:01 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 912 hex characters · 456 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210030201) = e01081b68ec0a1cfea12e82cc5bd3f94 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 14
Filler GUID seed: new Random(364).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 66 · predicted N = 14 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 912 hex characters = 456 bytes = 57 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210030201 (name+title). Key = MD5(password) = e01081b68ec0a1cfea12e82cc5bd3f94, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 14 GUIDs as hex (shown below).

Decrypted: GUID list

  1 dd8540af-e16d-838a-94db-123b4d9bc387
  2 83567f22-3d99-5ba7-97c1-748ef7ce16bc
  3 cae9f2f2-4bce-1678-be82-0cac624bea41
  4 eb62eb9f-8220-2018-8fe5-ad534727ccba
  5 f67a9685-fcdf-4500-87a9-04a7270f933a
  6 8abbe185-baac-5c0d-b255-cae7504f6951
  7 3970871a-1d1d-8522-9639-55b351efe1e4
  8 bd92d8d3-2994-0b7d-a8e7-2f52aae93d8a
  9 3ff7ee6a-c6e3-0acd-9fd2-6552856db133
 10 11cbcd28-d3d5-49be-a2ed-b35613f2aad5
 11 02b25e55-2306-4744-8130-395d2309ac1e
 12 94ee35db-d024-5035-8166-6925b4d9b111
 13 273adb50-ace6-7663-94b1-3f2699205fc3
 14 9e179b4e-367a-781a-83c0-855d5071572b

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 85124580044577. Exactly this sequence comes out of new Random(364).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 66 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 14; the post has N = 14 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related