201210062224 112key

explained decrypted filler

3DES(name+title) ECB, 29 GUIDs, seed 146

Metadata

Post ID: 112key
Title: 201210062224 → 2012-10-06 22:24 on A858's clock
Posted (UTC): 2012-10-07 02:24:41
Timezone: UTC−4 · title 22:24 against posted 02:24 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,872 hex characters · 936 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210062224) = 179b6e2af38383af2d4251dddf93e119 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 29
Filler GUID seed: new Random(146).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 343 · predicted N = 29 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 5 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,872 hex characters = 936 bytes = 117 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210062224 (name+title). Key = MD5(password) = 179b6e2af38383af2d4251dddf93e119, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 29 GUIDs as hex (shown below).

Decrypted: GUID list

  1 914ad964-f562-0a9e-82a1-51d837a8fdd4
  2 d561b57c-cf9c-5431-81e2-2dbb31e6122a
  3 dce88527-5d6c-71ef-aca8-4c04f0662ffa
  4 fc5c1ea2-1346-6997-a4b8-95668ae2d7d6
  5 3dcd1e15-ca20-15ca-80ae-d062151a1223
  6 6d9a0452-049f-1928-8d0b-45fb1861ed72
  7 4a5ba2d5-9b4a-2ab6-83f8-893ea6ae3ca1
  8 539feb42-5811-6cb6-965e-93930bbf2779
  9 c24681fe-97ec-0d7e-9f03-ceef620c4890
 10 3b046acf-d31b-15c5-bf11-af7d95341496
 11 1d05a903-1357-728c-b5a0-2c696c1038d7
 12 ded4d235-bf02-4d5f-b6d7-7dda85b4f34d
 13 2c757857-abd4-0d10-85f1-957593fc7ee1
 14 87162bd6-3d0a-3296-944b-3bd206cabef2
 15 3bb8d9a5-c75f-1d6a-9563-4f5aa512357e
 16 cb9d9fff-5e1b-1f34-b448-a9936de6f34e
 17 0381832b-997f-2e9a-adda-887fdae0c9e9
 18 e09a4be5-b0f1-4bec-b5b3-c9d93e973d48
 19 198c78e8-2923-54ca-a56f-cfb4eaeedf8e
 20 5a0ca04c-4835-71ed-87e6-dae85a225370
 21 6d4f5df6-b455-19d9-8482-f125663f63bf
 22 c576eeb8-5ff7-6dfa-ae6f-b88dd30c1375
 23 946c98e1-fd82-5168-a88a-20e029872b7d
 24 3db6d548-edb0-0676-8b90-0035e4e38b44
 25 f0c59391-4ad7-00ec-ae2f-f85f8de50c15
 26 3959ed90-e56d-3e9f-afed-b78fe235411a
 27 e5bee5a6-3ae5-4284-b22c-cf4188116a89
 28 aeb3ebf4-7b77-15b7-850b-62da71a06aea
 29 96bd4edd-15f9-70de-b269-2c7ef9460c57

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 05761126017403112457165003417. Exactly this sequence comes out of new Random(146).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 343 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 29; the post has N = 29 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related