201210051323 1101wm

explained decrypted filler

3DES(name+title) ECB, 24 GUIDs, seed 630

Metadata

Post ID: 1101wm
Title: 201210051323 → 2012-10-05 13:23 on A858's clock
Posted (UTC): 2012-10-05 17:23:21
Timezone: UTC−4 · title 13:23 against posted 17:23 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,552 hex characters · 776 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210051323) = 34da67372f3db6d307b25e9afca98619 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 24
Filler GUID seed: new Random(630).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 244 · predicted N = 24 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,552 hex characters = 776 bytes = 97 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210051323 (name+title). Key = MD5(password) = 34da67372f3db6d307b25e9afca98619, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 24 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a16b540e-e726-71b9-ab3d-a6f6eb5e1222
  2 7a9b974f-55e2-6e71-b539-375fbaf4789a
  3 fcf2c1e6-33f8-1789-abd4-2921f8ad227f
  4 651f483f-33aa-0a54-a558-c09c00971af9
  5 579b17b6-1a7c-5082-bde9-ecdacbb52343
  6 b0234dd1-50c3-1f0f-9056-33a749bdf9b1
  7 96f2a4ee-089f-19b0-ac29-a5c38891fd7c
  8 7051ca5c-0518-4398-9ca2-0b433cfaa44c
  9 26e86c0d-4e0f-896f-82cb-f3d3598a4670
 10 4d4c84a9-6bbe-504f-aa2b-3c7f22345a9c
 11 82dac57f-b232-3efc-a924-c06e4067a34f
 12 1fbe5549-d4ed-2769-91ac-ac203bb96f06
 13 a2c9e626-e31c-641b-bf03-d47482e1d1dc
 14 1ce549d0-70ab-299a-8cfa-d50e2c45dbc7
 15 b36f7472-67b7-80b5-9e29-98c1f8f3f5ea
 16 4e863c4d-dd89-4866-a745-7a33c645cbf7
 17 fd278a32-2da7-67b6-9560-e0308953afa8
 18 d9e7de69-697d-53a3-9a69-6ed39a903edb
 19 d030f390-1afd-6933-bb51-c13163ee7b58
 20 47efa6b8-3fee-254e-a472-eae3a89e70e2
 21 b25a176d-8d79-4615-94de-df461aabade9
 22 cb86dde9-0e14-3586-9c36-9919cca78f95
 23 4d7f963f-4572-421d-b8a7-b1270d40ae7b
 24 70486175-be38-1ba4-857f-9a2c792f85d5

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 761051148532628465624341. Exactly this sequence comes out of new Random(630).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 244 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 24; the post has N = 24 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related