201210030421 10v6wm

explained decrypted filler

3DES(name+title) ECB, 22 GUIDs, seed 792

Metadata

Post ID: 10v6wm
Title: 201210030421 → 2012-10-03 04:21 on A858's clock
Posted (UTC): 2012-10-03 08:21:06
Timezone: UTC−4 · title 04:21 against posted 08:21 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,424 hex characters · 712 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210030421) = f7102c650ab60d64bd5818caee7debd2 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 22
Filler GUID seed: new Random(792).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 73 · predicted N = 22 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,424 hex characters = 712 bytes = 89 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210030421 (name+title). Key = MD5(password) = f7102c650ab60d64bd5818caee7debd2, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 22 GUIDs as hex (shown below).

Decrypted: GUID list

  1 dfbdd726-183c-4779-acda-88b456cd825d
  2 7936001f-fae7-1ef9-9341-26d91ecad972
  3 c6bad076-906a-3f5c-861a-fe6b412cbed7
  4 a8d2dcbb-7969-5ce3-b318-3a03d6c6a4a6
  5 d48348cd-f3e3-72dc-8a31-c26609d6ac2a
  6 36cf0f70-e7bb-65f6-8994-2580da406c35
  7 d809ef59-973c-60c9-8217-b2d608a06601
  8 fa678644-b6be-6074-b5e5-25dd23b69e86
  9 41ddb59d-559b-88b1-8e0d-62b083c48f7a
 10 d0d9cb72-f3b0-25d9-ad95-78da6b90eff5
 11 a023cbbf-2369-7110-9aaf-476298b864e7
 12 82848107-97d3-72b8-b78e-cea9b475538e
 13 b452f9bf-ec6e-01cd-b4d3-4c673fab2f73
 14 9ab0db36-2045-441e-adfe-fdd526d84740
 15 d1c18275-5804-31a3-9e3a-7a1d1b096685
 16 bd49aa29-4838-5a6b-a18b-172ec8563099
 17 bffb5c61-22a0-77ac-817b-b30b0ed72814
 18 c083f2a7-de9a-00db-92bb-2f7028753ee2
 19 ce7f1959-f9ec-119b-bea7-c1f5716c2f52
 20 95315e62-9792-8fef-8991-49cd64e53219
 21 15d84795-2ab7-0d6b-a066-149a35eaa2ae
 22 bf408a40-9644-10d3-adb4-c35898b67185

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4135766682770435701801. Exactly this sequence comes out of new Random(792).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 73 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 22; the post has N = 22 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related