201210040802 10xjqz

explained decrypted filler

3DES(name+title) ECB, 23 GUIDs, seed 959

Metadata

Post ID: 10xjqz
Title: 201210040802 → 2012-10-04 08:02 on A858's clock
Posted (UTC): 2012-10-04 12:02:10
Timezone: UTC−4 · title 08:02 against posted 12:02 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,488 hex characters · 744 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210040802) = 02ca32ba52ce98135c03e64c4021e85f (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 23
Filler GUID seed: new Random(959).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 156 · predicted N = 23 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 15 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,488 hex characters = 744 bytes = 93 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210040802 (name+title). Key = MD5(password) = 02ca32ba52ce98135c03e64c4021e85f, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 23 GUIDs as hex (shown below).

Decrypted: GUID list

  1 64682818-77bd-6142-92a9-f2015f268e0f
  2 c46ca4c4-0356-1ee5-ab11-c643ab1883c0
  3 be2aedd5-adee-0a7e-b2b6-9713313cdcb6
  4 76180985-6d70-2686-b09d-0d7abbfafb3d
  5 119fb3cf-bce4-17e9-aba8-af14532afd6e
  6 e579b35e-e4a1-588d-8c5a-5fffb551f2cc
  7 f6ea47d7-9ac9-5f8e-bb56-6380917a643f
  8 6420f971-54ed-5f4b-844f-60b8eab5cf2c
  9 c48fd509-b399-5ab0-88da-29bd0a54e613
 10 2dc5fbd8-284a-84ad-9497-fc42a35d8315
 11 4994f845-7a2b-78e9-afbe-33160ac61cfb
 12 2208aa5b-a785-1d3e-9a16-21789eacd4bf
 13 bafd2893-8931-8b27-bc28-3951cfcc1165
 14 11d4b00a-fd8d-3542-9b1c-3153e4543822
 15 24a2c53b-2be2-2053-b71d-62b0d6d1e32e
 16 9df66de6-94a2-8c4f-b72f-5007098826eb
 17 d3beaa59-74c1-8364-aa74-6039dfbe1b20
 18 6b1a5b29-655e-595b-86a3-d65ce3954688
 19 f6ce5c1a-0b0a-52af-b9ee-32ea9e502d5b
 20 b04560f3-5c6d-59ad-acec-40cfc0c7e370
 21 6e98a282-21cb-2769-9983-9e42fa1d9520
 22 11fd87ab-d5c3-1205-88f0-e3cbec46b385
 23 55c5967c-7dfd-002c-8891-a4a9dc04b71f

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 61021555587183288555210. Exactly this sequence comes out of new Random(959).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 156 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 23; the post has N = 23 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related