201210052203 110w1w

explained decrypted filler

3DES(name+title) ECB, 12 GUIDs, seed 854

Metadata

Post ID: 110w1w
Title: 201210052203 → 2012-10-05 22:03 on A858's clock
Posted (UTC): 2012-10-06 02:03:43
Timezone: UTC−4 · title 22:03 against posted 02:03 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 784 hex characters · 392 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210052203) = e5e0a9b8f83c35346c4c3edb890af8a0 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 12
Filler GUID seed: new Random(854).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 270 · predicted N = 12 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 5 · 1
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 784 hex characters = 392 bytes = 49 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210052203 (name+title). Key = MD5(password) = e5e0a9b8f83c35346c4c3edb890af8a0, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 12 GUIDs as hex (shown below).

Decrypted: GUID list

  1 6cac1e0f-6544-7eef-af1a-9941cdb4adc4
  2 bde359b6-9dab-307b-8f1e-bf9c82c58afc
  3 e7a76c60-955d-66a3-941e-50d361744d75
  4 130e02c3-7b12-746d-9423-a86151f6762c
  5 3a0f27ae-f7b2-648b-a174-8982bdf2bfee
  6 31ef9f87-ff83-7d81-980c-416f41e4c7e1
  7 d0f28329-4473-458a-9b35-96febbb14114
  8 1a407c6a-0304-74d4-a8cc-4a258a54dfb2
  9 0145a020-6722-5f76-8b1b-f163d1e28ced
 10 af6f082a-78a7-1373-8049-9102e56fb79a
 11 bd34b651-6eb3-4b71-b6d0-f075dc3f847e
 12 7d5868dc-3ab6-1635-8ed5-3baf5edf8438

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 736767475141. Exactly this sequence comes out of new Random(854).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 270 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 12; the post has N = 12 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related