201210051503 11088p

explained decrypted filler

3DES(name+title) ECB, 21 GUIDs, seed 484

Metadata

Post ID: 11088p
Title: 201210051503 → 2012-10-05 15:03 on A858's clock
Posted (UTC): 2012-10-05 19:03:23
Timezone: UTC−4 · title 15:03 against posted 19:03 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,360 hex characters · 680 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210051503) = e88553dc17ebb5e8a32fb00186b49c8f (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 21
Filler GUID seed: new Random(484).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 249 · predicted N = 21 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,360 hex characters = 680 bytes = 85 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210051503 (name+title). Key = MD5(password) = e88553dc17ebb5e8a32fb00186b49c8f, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 21 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d6806e67-424b-5274-b167-de587e56328d
  2 773b4e8c-c1cf-747e-9a9b-3b286a29bf82
  3 6c8d6a53-4acb-0b01-a733-b5e3789a0c9e
  4 9aa5731c-633b-7fbf-9233-2a1525b073dd
  5 bd2baf1e-5c6f-6b99-96a9-3a1eacf59f37
  6 c83ede88-4ca1-4cd2-a4e5-df64020bd9cd
  7 cf60f183-8390-62ab-a121-39093b936ecc
  8 07c34949-77e2-2953-ac80-145fc4ae6e27
  9 c61f6ab4-fd11-79c1-8044-926a93a04ca5
 10 b188abd1-e579-6964-9a17-2b7f6d8f9054
 11 2799254b-d36c-7075-bfe7-ae16a57e439a
 12 bd405970-e3d1-28ec-a7f6-00f6fdc9dbef
 13 d1649fd7-86e0-3f88-9b42-efc03333da6b
 14 5735db13-4a08-21d0-a1b3-120ea71a49f0
 15 070eed22-bca4-6775-8c1a-6c03f1dcb47f
 16 38fe7f29-e27e-29db-ad85-c692dc544e3b
 17 010d2486-2898-269a-8729-12603ae66cb5
 18 c4cedc7b-e196-046e-b8cf-8d31cd503f58
 19 3be4519d-9e4a-7fd8-b8dc-3b15f12128a6
 20 a35b7479-b8dc-63da-83f1-8a1bc37dc8cd
 21 b78e7474-4d16-1bdc-bf64-936ec5ca7dea

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 570764627672326220761. Exactly this sequence comes out of new Random(484).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 249 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 21; the post has N = 21 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related