201210061124 111lc1

explained decrypted filler

3DES(name+title) ECB, 24 GUIDs, seed 615

Metadata

Post ID: 111lc1
Title: 201210061124 → 2012-10-06 11:24 on A858's clock
Posted (UTC): 2012-10-06 15:24:14
Timezone: UTC−4 · title 11:24 against posted 15:24 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,552 hex characters · 776 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210061124) = 5b1d7b9d90e241ca7f005d39c5291b3f (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 24
Filler GUID seed: new Random(615).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 310 · predicted N = 24 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,552 hex characters = 776 bytes = 97 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210061124 (name+title). Key = MD5(password) = 5b1d7b9d90e241ca7f005d39c5291b3f, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 24 GUIDs as hex (shown below).

Decrypted: GUID list

  1 73e05fe7-0276-0960-b035-963ca928427c
  2 3e272f70-1db8-2746-ad67-0f7f08b86fbf
  3 97672bdb-625e-5171-9c56-410d6f9baa89
  4 fc3335a0-9bc1-7c3a-afe0-aaffebfd82d3
  5 ad0fa809-918a-7960-b622-8ed64cbb2cc7
  6 61833f0a-c082-0992-b9db-ceb7ead32f16
  7 b6a01b47-cdec-4454-9968-eb94cc36dc47
  8 23c2e2c6-4b14-81ca-b6bf-e2e31c60943b
  9 0c915327-b849-08c4-b44d-8f3a07a5784c
 10 6a938808-7d3f-0c49-9e11-2248c2d5bc29
 11 ed8b40a8-38a4-343b-94ca-039f196c1859
 12 303ddca0-0d5d-5c77-967a-c5deeb1691a8
 13 c95b639f-8427-3d5e-9ad7-bc721ae2ae17
 14 31ad4b2c-ad92-318c-85b4-d97bd15d7153
 15 e96272ed-87d0-47f0-ad58-045c7070edcd
 16 67354ec8-906c-0f43-a27b-e7146ccd0569
 17 73e8c470-49f9-3d46-9dcc-a8dc7caf767a
 18 c30869d4-f43b-29ce-b7d8-9a1d26cdd9b0
 19 3bcc0aa1-e08e-29a6-a3af-94b4ae4f11fd
 20 8cefe889-ccd2-4bdf-ac89-f566197e23be
 21 2770e39a-85e6-468f-825c-6dfa37959728
 22 f32797bf-3aa0-6a7a-8e2a-82e545930d35
 23 b5193908-971a-81aa-89b1-76f2ec29170d
 24 23db63b5-4b60-70dd-819a-7eb234efec44

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 025770480035334032244687. Exactly this sequence comes out of new Random(615).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 310 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 24; the post has N = 24 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related