201210031141 10vnyj

explained decrypted filler

3DES(name+title) ECB, 24 GUIDs, seed 700

Metadata

Post ID: 10vnyj
Title: 201210031141 → 2012-10-03 11:41 on A858's clock
Posted (UTC): 2012-10-03 15:41:20
Timezone: UTC−4 · title 11:41 against posted 15:41 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,552 hex characters · 776 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210031141) = 0231cde389349ca0f62c8923f13e27a5 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 24
Filler GUID seed: new Random(700).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 95 · predicted N = 24 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 3 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,552 hex characters = 776 bytes = 97 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210031141 (name+title). Key = MD5(password) = 0231cde389349ca0f62c8923f13e27a5, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 24 GUIDs as hex (shown below).

Decrypted: GUID list

  1 f2a9c118-6074-3614-8966-c5b7f22c8c5a
  2 82754d0c-a0ae-1ad5-9a4d-bce14ab0be6f
  3 5ad5bdce-9204-0a0f-8c9f-b62b8586d823
  4 55b81b68-f9f4-8eb5-a747-f92273f187a7
  5 dfca148b-c810-29d7-a8ad-b749fef7c44d
  6 ebd44032-b406-20e9-ba49-8694a97d116e
  7 7c5b6080-8064-4a6f-94be-a4f28a52adf7
  8 c255b3a2-90e5-5bbd-8806-ef040f43c03d
  9 f6f548b3-49e8-540f-8659-0c87418ae001
 10 764d8a4b-f674-3a9d-b19b-1631b696150d
 11 f3ecc5a2-6092-06bb-a762-f9bc2800e1e4
 12 e3d2f82d-fb3d-8912-8fd9-313b0b7397a5
 13 49159313-04ca-746b-a542-66a45639444e
 14 fae36995-5ac4-5337-ac70-fce7a6a929ea
 15 e831fc51-4b96-8e22-a026-9838801111df
 16 6a28cfe4-9a52-1ca7-ae8c-c30d85e67c6e
 17 fe76da98-14f0-1c33-89f6-bf48c0c5b5a7
 18 500d5e7a-9b6e-83eb-9b5c-aed7cfc8999e
 19 90eee38f-915c-5664-a664-68225f394943
 20 45707484-715e-3486-adfb-a6c550002d13
 21 0e41dfce-f03a-760a-a062-d735558295bd
 22 25e66fd3-37a1-544a-975a-56173f709bb2
 23 a121ac09-42af-2fd5-97c0-397fe6ae3bb1
 24 4e7fedcd-421e-5880-ab7a-69a5834cae74

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 310822455308758118537525. Exactly this sequence comes out of new Random(700).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 95 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 24; the post has N = 24 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related