201210050002 10z6dc

explained decrypted filler

3DES(name+title) ECB, 36 GUIDs, seed 490

Metadata

Post ID: 10z6dc
Title: 201210050002 → 2012-10-05 00:02 on A858's clock
Posted (UTC): 2012-10-05 04:02:51
Timezone: UTC−4 · title 00:02 against posted 04:02 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,320 hex characters · 1,160 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210050002) = 2d40b2e32d1625c18d5e962919971140 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 36
Filler GUID seed: new Random(490).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 204 · predicted N = 36 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210050002 (name+title). Key = MD5(password) = 2d40b2e32d1625c18d5e962919971140, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 da5e6066-3747-65e8-8401-e541defddd59
  2 1563c867-a8bc-5cea-a977-cc8aa42e8e0b
  3 78c86d12-0f28-288f-aef2-f21dcbb32b5a
  4 06a8fdaa-7c91-1b6d-ac8a-8025e57c9232
  5 90c369e4-369a-39a1-9f9f-a86fa2b64d55
  6 134a3e3f-ef9a-656a-8128-16fff9450a4f
  7 c0f86b34-62e9-4994-b57c-4f922990991b
  8 74a0898d-9273-2b62-b8d1-36a18e897e53
  9 f2e46f20-9799-5a45-aa3d-0842fe3d5692
 10 b0bd762e-6a32-851b-be5c-55baf1076ba6
 11 532e3508-665b-2cfc-99b4-8c67d7378249
 12 bb25d7ca-a372-0de4-b8dd-208a70878fca
 13 d9a8fb2c-df6f-4a8a-9f31-60377cc544f1
 14 67f8b4b7-c944-39bf-9fba-e22d26f1e3ad
 15 4ad62e63-35a4-899b-9c2a-09a830a34d9e
 16 4f6b3288-b433-0011-96ce-182e6c390014
 17 db395207-bc6f-7bff-a49f-e579713a22e5
 18 514088dd-ce06-7b56-a3d1-f870bc90ce02
 19 1b8cab61-8229-86af-9b6d-2aba67693afb
 20 50d22203-03ad-03e3-aa19-12738df8241a
 21 ccfac1f8-f0c7-8668-b8ac-caa3e24531d7
 22 a0fe7cb8-c13b-0c5c-aaf9-bb51f46fcf43
 23 8b127bbd-404c-7235-9bd3-8d243d39e930
 24 54108b25-e009-1ee0-86ff-09f726c34c50
 25 965916a3-603e-671c-a5a1-1494dd0eb7ad
 26 6998d1be-6cf9-6322-a553-2ff3b2e81756
 27 8cc658fd-a3a6-1d41-a186-0d7adc7c27fa
 28 c7040458-1ebd-2302-baf1-e995995e0da2
 29 841b6e7c-1bcc-8d8b-8252-f046ddb08e22
 30 47bb71be-21c5-63b2-a966-f70e1f9eeaaa
 31 e4d653cb-963d-04f5-8d8c-814d999cf58d
 32 387dea72-5455-4636-81cb-b3a1f781cef7
 33 16510ad8-9418-3abb-a7ce-55d7a5befcfd
 34 da41ee50-e602-2d0c-b27f-e2c3f3b1a1c2
 35 cdc9c865-d511-6084-bee1-21493d3f6edd
 36 d7e945bf-e8e8-86c7-adad-7873039cd349

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 652136425820438077808071661286043268. Exactly this sequence comes out of new Random(490).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 204 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related