201210042342 10z5a5

explained decrypted filler

3DES(name+title) ECB, 29 GUIDs, seed 964

Metadata

Post ID: 10z5a5
Title: 201210042342 → 2012-10-04 23:42 on A858's clock
Posted (UTC): 2012-10-05 03:42:51
Timezone: UTC−4 · title 23:42 against posted 03:42 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,872 hex characters · 936 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210042342) = 8b598efadf4942cdc8f46b0690c4d559 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 29
Filler GUID seed: new Random(964).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 203 · predicted N = 29 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 5 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,872 hex characters = 936 bytes = 117 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210042342 (name+title). Key = MD5(password) = 8b598efadf4942cdc8f46b0690c4d559, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 29 GUIDs as hex (shown below).

Decrypted: GUID list

  1 2c3824a5-00a9-3f26-993f-dea353425b5e
  2 e64e9a01-7069-61e3-b41f-f29446a444a3
  3 3cb848cf-3ad0-5464-8b35-d8c147cd5dee
  4 a1cfee2e-c224-2ec8-b1ca-56b59ecf57cc
  5 7d4d3bcf-2baf-3f4d-aa12-d1ff93e08fcf
  6 4fec6894-2f30-84f0-9adf-6b8ff6e7f1a7
  7 54c640b6-3831-7846-95dd-c3b60bb3b0b2
  8 16e1986e-b55f-0b1d-98dd-a36b073e265e
  9 f2fcf2a1-5455-243f-a940-f0ed3c85fe87
 10 28d31141-2eb5-6015-8201-e3d9e8b3af71
 11 8ab2aa56-888c-45e1-aec8-eb4396c311ff
 12 a69114ed-4762-0ab1-8aef-cc610501d849
 13 f7fa2312-f330-3d97-a12d-d14f62ebc4ee
 14 4e86b6d8-16e6-8180-9dbc-c6951c87dfb2
 15 cce5618a-1272-684b-b257-f65dc85404c2
 16 06c4a4cf-32bf-0dd6-aa71-7d6a864bc7c1
 17 ec7ba898-a101-0304-97dd-689e182ac48f
 18 f3d85619-eda4-6fac-aa99-fbea5f012d11
 19 5714111c-bec1-606b-9056-f4ecc1847929
 20 cddd2fd6-4c38-5e07-951d-621d55aa238e
 21 278a094a-51f4-8ba8-bcf8-3666a52ec705
 22 d4eb7bb9-978b-34cc-a361-fdf74fe67012
 23 fba0727e-e1cb-8b06-88d1-7efbd440c60a
 24 f4f058d6-bdfe-7905-a0ae-d4c8462307bb
 25 11af4763-6d9f-1813-bc95-151d94d59e25
 26 a773c79a-9467-4dad-98c5-f65931bdf72e
 27 b3fb2106-3220-67b3-9abd-632375b7ae20
 28 8d18eb11-169d-8b99-b2c1-d1cfa6721743
 29 d568ca79-c418-78dd-a2af-d87db09f9785

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 36523870264038600665838714687. Exactly this sequence comes out of new Random(964).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 203 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 29; the post has N = 29 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related