201210031321 10vum1

explained decrypted filler

3DES(name+title) ECB, 24 GUIDs, seed 517

Metadata

Post ID: 10vum1
Title: 201210031321 → 2012-10-03 13:21 on A858's clock
Posted (UTC): 2012-10-03 17:21:23
Timezone: UTC−4 · title 13:21 against posted 17:21 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,552 hex characters · 776 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210031321) = 6198ab5e56566c47df2630cd7c6f0599 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 24
Filler GUID seed: new Random(517).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 100 · predicted N = 24 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,552 hex characters = 776 bytes = 97 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210031321 (name+title). Key = MD5(password) = 6198ab5e56566c47df2630cd7c6f0599, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 24 GUIDs as hex (shown below).

Decrypted: GUID list

  1 171c1ea3-bd02-74f4-bdfc-14aa4131e6ab
  2 7e7dd7c9-fda4-4423-aa15-957b076d0f5a
  3 15b946ef-fc72-13e4-b452-5eb1a3f918e1
  4 f7ab094c-108e-8866-8152-143525acf856
  5 4afdff53-c306-5a0f-a959-9fe191d9cbfd
  6 fef1ab82-f7dd-3a42-ad0f-0a25d996d1fa
  7 7a6cd192-e91a-4abe-bcf2-8da0b1ecf59c
  8 85944fdc-bbda-757b-8ab7-a7d6e045370f
  9 b1cf0534-2139-8a69-86d2-3bf86a320f6b
 10 7e6174f3-c7ac-8f31-a38f-6cc63bc70731
 11 6017c3d8-9121-1c49-ad4f-61c31223ab87
 12 65439183-a527-08ca-bcba-772e168b78f8
 13 d55eaf22-d1d3-08be-bc33-44b55f33e2c1
 14 795d3d07-9013-3297-a435-10c7751f95f7
 15 ef44938b-0b31-7bde-bd71-b7c9bcf9c44d
 16 974ae309-f9a7-8dd9-a1c3-160003464de6
 17 1c7e5078-641b-1c58-b1ac-572139e7f655
 18 da89c9d9-bf37-4bbc-9fea-3330db761ad3
 19 6389774f-d218-624d-9333-e384cf0a8960
 20 2aa43522-2e7b-4146-8b7e-3209faa91fb5
 21 7261a6e1-a564-4627-bff5-f9e8e638e37e
 22 ec57f3ed-378c-6ff7-a442-e84cce448422
 23 d46c6a2e-5c20-3b7f-b0ff-d3954509d798
 24 b8251cd9-2f28-54ae-a5f5-d7f7e1983f33

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 741853478810037814644635. Exactly this sequence comes out of new Random(517).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 100 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 24; the post has N = 24 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related