201210060944 111he7

explained decrypted filler

3DES(name+title) ECB, 23 GUIDs, seed 704

Metadata

Post ID: 111he7
Title: 201210060944 → 2012-10-06 09:44 on A858's clock
Posted (UTC): 2012-10-06 13:44:09
Timezone: UTC−4 · title 09:44 against posted 13:44 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,488 hex characters · 744 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210060944) = 7f1ea8c0b00c51e44592290dae977808 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 23
Filler GUID seed: new Random(704).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 305 · predicted N = 23 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,488 hex characters = 744 bytes = 93 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210060944 (name+title). Key = MD5(password) = 7f1ea8c0b00c51e44592290dae977808, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 23 GUIDs as hex (shown below).

Decrypted: GUID list

  1 88176440-92b2-485d-a002-b8f4a9b41f24
  2 e2d13d7c-a497-34ce-b18f-df7acde5d144
  3 f73a958a-deaf-7d0a-bf62-49a5b83dfcf0
  4 923d5584-2fa7-7463-b63f-5fe4d54370af
  5 4ed1ca29-56da-014b-b6ce-65701f93f56f
  6 5efeb5b0-e46b-7351-94b5-282ee366be35
  7 6f2e808f-0700-38e3-ab66-8b1363ff7d45
  8 78aabc2d-ebf9-58b5-9d24-b805c84351a8
  9 3867f149-a1d3-09c4-88cb-91575bcb567b
 10 f99dc7c3-6640-7013-b901-98078bd813d7
 11 3afcec31-c7aa-8a55-8974-249d8a1e0307
 12 56a6d078-f2b3-09e6-a581-0a867675d0b8
 13 b9142903-0e7b-5baa-bdd8-dbe435803330
 14 727a441e-3512-60ce-b26b-0b7815ba89aa
 15 f0d4f432-fe09-6f80-a144-c5e227a9cd4e
 16 78e46972-1b4e-60da-8e25-667719a3b165
 17 1a8ed262-422d-7793-8575-23a53598860a
 18 df716b79-5e5d-4b72-aacf-961fbafb6cf7
 19 6a70d565-3fd9-6401-a6d4-7748098f32c4
 20 e80e99bd-41b7-8a44-9449-f120e7c4896a
 21 48f0b1ca-5f4f-3316-a470-28fea7ed8e67
 22 0b71efae-ada1-5685-bcc6-e6d04e27da69
 23 dd6b543b-b1ed-8873-b579-631db15cce38

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 43770735078056667468358. Exactly this sequence comes out of new Random(704).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 305 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 23; the post has N = 23 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related