201210040902 10xm0t

explained decrypted filler

3DES(name+title) ECB, 35 GUIDs, seed 13

Metadata

Post ID: 10xm0t
Title: 201210040902 → 2012-10-04 09:02 on A858's clock
Posted (UTC): 2012-10-04 13:02:12
Timezone: UTC−4 · title 09:02 against posted 13:02 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,256 hex characters · 1,128 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210040902) = ff2182975cc436779c744fb2545e8695 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 35
Filler GUID seed: new Random(13).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 159 · predicted N = 35 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 2,256 hex characters = 1,128 bytes = 141 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210040902 (name+title). Key = MD5(password) = ff2182975cc436779c744fb2545e8695, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 35 GUIDs as hex (shown below).

Decrypted: GUID list

  1 f4064b41-36cb-45b8-b1ca-d2f0803315ab
  2 c8432fdd-2dcb-5bde-9fb0-86ceff304322
  3 94a5ac1b-7442-7e99-a673-3ee7027a233c
  4 714c8bf5-4bd1-2e64-b9b1-ebfb68851e45
  5 08b4b92d-50f8-0d20-b42e-f23832317c83
  6 b83bd855-3961-87a5-aa7d-414e1ff1addd
  7 cde6dffa-8928-6e43-83b3-41dee0e4da16
  8 0d9892ac-73b3-85cb-b67b-4ef2a9532ecc
  9 c6d6f6c9-e5a8-5daa-9bdd-77046d7c7657
 10 4073b184-76d7-0fcc-816a-f1006e9985c9
 11 39192f7e-d4f5-7feb-91af-574add1a329c
 12 3237b776-16a3-5d90-a0f7-ca6b130a4575
 13 aafe7e8f-43ea-5b26-bba8-5f3605db7ccd
 14 e4dcdbd7-5f2a-2df7-9c0c-daaabec444a3
 15 645f2d0c-ad68-04b4-96bf-db43ebbe6b13
 16 684f7bb2-6f62-18f8-a986-bf7068b6d9ec
 17 8615fb7e-b86f-29bf-877e-0f88329731cd
 18 83109e86-5754-05c3-ad71-628d226833b5
 19 de185b32-4e69-0863-bfe7-bdb48a93d142
 20 2c3a05d3-5d08-321f-ac02-6ac1b41b447d
 21 5322d9a0-8c0f-4a55-a4c9-f028deb7787f
 22 c2beeccc-537a-0aac-8965-11ba5c2e83b3
 23 7b623632-26ba-19a4-8a68-79417640d5dc
 24 14498ed4-2eba-5256-9f47-a7f6e0add35b
 25 19cad6ad-7b95-8b84-ae81-5d9b961ec144
 26 fb2730f6-a653-77da-ba7f-ca7177347216
 27 773d0083-9091-0264-a94d-e4e55a9aa6bf
 28 d527e038-db3c-63f4-8725-7abe85f46e69
 29 79ad03ef-a681-13e2-96d3-8158a6fa7665
 30 bd49908b-36d5-4efa-86c3-3d382899732c
 31 28240a25-28ec-8a5f-a598-cf54efeda411
 32 85638923-0407-780d-b622-39c51b71826c
 33 5ac9c36d-8624-4b23-bcd5-e72c575da381
 34 abcbaea3-eb99-22ba-b820-14409a8a0c06
 35 e74fe71c-1223-1fee-9040-75cdc682f2ca

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 45720868507552012003401587061487421. Exactly this sequence comes out of new Random(13).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 159 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 35; the post has N = 35 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related