201210031701 10w9y2

explained decrypted filler

3DES(name+title) ECB, 22 GUIDs, seed 590

Metadata

Post ID: 10w9y2
Title: 201210031701 → 2012-10-03 17:01 on A858's clock
Posted (UTC): 2012-10-03 21:01:30
Timezone: UTC−4 · title 17:01 against posted 21:01 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,424 hex characters · 712 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210031701) = 730e617ab37e4fe68baad0dbbc66c116 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 22
Filler GUID seed: new Random(590).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 111 · predicted N = 22 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,424 hex characters = 712 bytes = 89 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210031701 (name+title). Key = MD5(password) = 730e617ab37e4fe68baad0dbbc66c116, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 22 GUIDs as hex (shown below).

Decrypted: GUID list

  1 1a60fd3c-1b29-80b6-9ea1-ebe7733ae313
  2 821196d9-9663-8da3-85d8-817f2b28a96d
  3 444c73ba-50bc-1f77-b068-7148873797fe
  4 b8bf7409-ea1b-4d51-b17a-6e084514160f
  5 7d9ed3c4-2c57-5a0f-8fd3-639ff2e87fcf
  6 f18f5755-fbe2-1eea-83e8-a67264dcd1fb
  7 9da7af31-caf9-2dac-9088-265681acd3f9
  8 d9cb9b4c-e290-3c3b-ba01-b7be5aa57a2f
  9 dc61f0b1-c563-8c17-aab7-071db213c6f0
 10 52d8c0c5-8636-7ef9-a5cf-1f52bcf1051c
 11 55aae9ca-456b-8002-8170-c5b1fb5d8b6b
 12 2cf0b95c-388c-07d5-93eb-44927ea207b1
 13 d74a44d1-fa60-2703-90ee-6a502606a4aa
 14 d4fc9941-62ba-3578-8a30-94b0e123694f
 15 d6e65c81-94d8-8589-8148-f579368548d9
 16 4a0c7247-47fe-436f-bc27-e280c7be7c27
 17 e2a0352b-4e40-74c2-8ef4-15a7fb43025d
 18 de509af0-c345-73db-bcc0-eb5f34d32cba
 19 1e24106f-8202-5813-a349-2df9b9c9ef29
 20 f69dc332-0d8d-6730-8112-0ceb6f148621
 21 adfeab8e-ef1c-14c7-a4aa-abf5320da266
 22 1dadda86-6639-578e-9b97-9ca3db76311c

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8814512387802384775615. Exactly this sequence comes out of new Random(590).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 111 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 22; the post has N = 22 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related