201210041922 10yphu

explained decrypted filler

3DES(name+title) ECB, 19 GUIDs, seed 335

Metadata

Post ID: 10yphu
Title: 201210041922 → 2012-10-04 19:22 on A858's clock
Posted (UTC): 2012-10-04 23:22:37
Timezone: UTC−4 · title 19:22 against posted 23:22 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,232 hex characters · 616 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210041922) = 3c3720ec82ac191d881f7a943df403c9 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 19
Filler GUID seed: new Random(335).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 190 · predicted N = 19 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,232 hex characters = 616 bytes = 77 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210041922 (name+title). Key = MD5(password) = 3c3720ec82ac191d881f7a943df403c9, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 19 GUIDs as hex (shown below).

Decrypted: GUID list

  1 86e37269-fab4-6105-a50d-f2ca8b403a6d
  2 ae39db3a-d017-1607-b9aa-1a2d4da73801
  3 585d4c6b-417b-8871-ae47-a6b295c3b977
  4 e7035975-6896-09e0-8af8-42094136dcc8
  5 aa7fdd79-a491-4fe8-a697-4580be906d23
  6 7ed5fe3a-e905-221f-b224-9bbc9a3f002c
  7 72585eb6-0962-0e58-80ff-c1affee0be01
  8 6aff8d11-92c4-43be-aebf-b2922c432b62
  9 7e6de4dc-e8f7-31ea-be7a-79df65765d46
 10 845ca33c-5a4b-78df-918d-cc2a009f0ee7
 11 5beefba3-6d72-0f47-8fb4-88097678e51d
 12 8c2e049b-556a-0e2e-9606-cd582fc47b92
 13 b72167b9-d664-85dd-914b-ae63a230c91a
 14 2a36868e-ecd1-6f12-87e4-88fa5de433b9
 15 47120897-393f-45f2-aed2-733b83236a6d
 16 6c2a751c-313b-2dd3-8418-ac826414e2f8
 17 5d97853a-0acd-6a20-a1ba-8f5d01a59786
 18 4307a19d-2b47-655b-b356-b97ba708c400
 19 28d331f5-15fe-63e3-a7f1-636da99d947c

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6180420437008642666. Exactly this sequence comes out of new Random(335).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 190 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 19; the post has N = 19 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related