201210060644 111cyz

explained decrypted filler

3DES(name+title) ECB, 23 GUIDs, seed 288

Metadata

Post ID: 111cyz
Title: 201210060644 → 2012-10-06 06:44 on A858's clock
Posted (UTC): 2012-10-06 10:44:03
Timezone: UTC−4 · title 06:44 against posted 10:44 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,488 hex characters · 744 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210060644) = 9b5dfe267af557ef5d2cfd463716c4af (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 23
Filler GUID seed: new Random(288).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 296 · predicted N = 23 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 7 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,488 hex characters = 744 bytes = 93 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210060644 (name+title). Key = MD5(password) = 9b5dfe267af557ef5d2cfd463716c4af, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 23 GUIDs as hex (shown below).

Decrypted: GUID list

  1 27f8862d-9952-151c-aff3-40b8f37d2c9f
  2 924d6c64-6ebf-22fb-864e-02bebe03f3df
  3 b604e2d2-9999-0823-a795-42f85b830ccc
  4 e348778f-7cb8-0ddf-9bc0-fd308f642590
  5 e188b1c5-dc18-2a41-a95a-dc2afb75ba9b
  6 164c2b29-6285-2c9c-9c99-ecdb4fcc78f8
  7 acb9bedb-e9c3-80a0-ad4d-8b242d247f64
  8 6ede83af-4d79-861c-844f-a6ca222b538e
  9 9b868056-03b6-5f50-bd8e-ab3a6de96512
 10 4a9b1026-7351-426f-b6e3-fb5574689842
 11 066045f0-c649-4c8b-a4e0-a96a5d6296f2
 12 41b4a3fd-f1af-21ac-8f06-78c70afaa78b
 13 b0090f98-f65f-5492-83cc-1fea35017ac5
 14 3c7e76bd-1c2c-2174-a795-f47210594dc1
 15 0d8570e6-2d48-53e2-a121-d9ad176dce2d
 16 fb667e3d-b90c-8303-a11b-cff9671a0f7d
 17 67bd9883-1711-89a2-80ab-1356af05a8ab
 18 83843260-38a9-432a-9e1c-ead468e9080c
 19 17828479-0a35-44b3-ae9c-1e92ca88861c
 20 b17cda49-fe41-7727-9ddf-16e70577758a
 21 fa29be95-4f27-0360-9a4c-b4acd4be3c37
 22 4cf6a22c-5d74-4cc4-a58b-09f998cef063
 23 fde208c4-b7cf-5a34-b820-629c997cd2f0

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 12002288544252588447045. Exactly this sequence comes out of new Random(288).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 296 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 23; the post has N = 23 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related