201210041002 10xox0

explained decrypted filler

3DES(name+title) ECB, 24 GUIDs, seed 568

Metadata

Post ID: 10xox0
Title: 201210041002 → 2012-10-04 10:02 on A858's clock
Posted (UTC): 2012-10-04 14:02:14
Timezone: UTC−4 · title 10:02 against posted 14:02 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,552 hex characters · 776 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210041002) = 639d36e76e8d4f08b72af09b04efcc7c (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 24
Filler GUID seed: new Random(568).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 162 · predicted N = 24 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,552 hex characters = 776 bytes = 97 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210041002 (name+title). Key = MD5(password) = 639d36e76e8d4f08b72af09b04efcc7c, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 24 GUIDs as hex (shown below).

Decrypted: GUID list

  1 911b33aa-b5d8-4f3a-8df8-978463589af9
  2 eb0dc1d2-423c-4975-bcc3-6162fe5b8d53
  3 b619202f-fc6d-7fa7-9b54-cfe082b0e138
  4 7e94f102-9604-7ea3-b16d-d6cca4fd45ba
  5 26cc244b-c613-523a-8a56-5beb7d222b01
  6 1d298d1f-8ab6-8d12-8331-3f5b4d982667
  7 03eb7d79-0ff5-3c39-9687-66f842092b86
  8 10734832-d7f7-3c56-9499-8373c52952e7
  9 db2b692d-143b-2267-a6f3-82562f7cddf8
 10 9f148636-4b4f-667d-8298-52ae5fc19184
 11 a786c857-d68d-6b46-9bdc-4f2cd275b282
 12 516a1f2f-4562-85d9-85c0-9aa641e67007
 13 c1146f23-f556-0c91-8dc7-a337e42d043f
 14 cec581ce-4029-8acf-bd66-d7a637fe3815
 15 c8bb3dca-db08-56e6-9433-13590c864e6f
 16 4779ce46-1115-6bdb-b1cf-6ca5e9449945
 17 8e6ca289-70bf-549e-ab73-cef7900ca9dd
 18 02c763aa-e350-17e6-b7d6-ab379d8151e9
 19 299affaa-1167-0b8d-82aa-f1226c4f6aee
 20 31666626-405b-28dc-a683-58932eb0cbff
 21 94be01f5-7583-25f8-b82b-d65eebb4d787
 22 af889f8b-d2f0-198f-a1cf-61901d56b0f2
 23 d5ba7398-b99d-85a9-abc2-591c3a36bca3
 24 a5cad793-d0f4-4fbc-9654-1ffca95b7423

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 447758332668085651022184. Exactly this sequence comes out of new Random(568).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 162 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 24; the post has N = 24 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related