201210060003 1111sf

explained decrypted filler

3DES(name+title) ECB, 12 GUIDs, seed 24

Metadata

Post ID: 1111sf
Title: 201210060003 → 2012-10-06 00:03 on A858's clock
Posted (UTC): 2012-10-06 04:03:48
Timezone: UTC−4 · title 00:03 against posted 04:03 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 784 hex characters · 392 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210060003) = fb6b240c7d6ca97b379f4435ce326c5d (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 12
Filler GUID seed: new Random(24).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 276 · predicted N = 12 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 784 hex characters = 392 bytes = 49 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210060003 (name+title). Key = MD5(password) = fb6b240c7d6ca97b379f4435ce326c5d, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 12 GUIDs as hex (shown below).

Decrypted: GUID list

  1 14bc7d89-16c0-28de-b0f3-72ab449e60d1
  2 74edcb0a-6b56-72d2-aeb9-7e0226c4a7b1
  3 8d522291-a13a-45b5-917b-55557e7bce9a
  4 bbdd37be-1b2e-65d0-8814-20fddf0bbafd
  5 58681f82-6067-073a-b50f-58601081084a
  6 b9ca63e7-1d80-4eae-a2f4-e2bf87194e07
  7 43ef7107-fdc3-5efb-9602-cd999a9795fb
  8 1dd899be-cb5e-4b9f-8d57-d1eccb1e7e8c
  9 3f092dfa-e755-87c6-833b-1ba146528bb2
 10 f4daa00d-c52d-1588-a495-ce5c6656d5f9
 11 be76fcb8-2675-834d-877a-f95594d785d2
 12 b252722a-855d-175d-97c4-feaf32bece23

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 274604548181. Exactly this sequence comes out of new Random(24).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 276 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 12; the post has N = 12 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related