201210070424 112xne

explained decrypted filler

3DES(name+title) ECB, 25 GUIDs, seed 238

Metadata

Post ID: 112xne
Title: 201210070424 → 2012-10-07 04:24 on A858's clock
Posted (UTC): 2012-10-07 08:24:54
Timezone: UTC−4 · title 04:24 against posted 08:24 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,616 hex characters · 808 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210070424) = ef42a78141a0db69036be646d8fd76d5 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 25
Filler GUID seed: new Random(238).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 361 · predicted N = 25 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 7 · 1
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,616 hex characters = 808 bytes = 101 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210070424 (name+title). Key = MD5(password) = ef42a78141a0db69036be646d8fd76d5, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 25 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a453f629-b101-0da0-b707-ac387331b94f
  2 2c5d010a-90ed-5383-bc6a-01c7b0351f23
  3 11a7f126-6a36-1097-b99b-9f7692888a4f
  4 f0360a88-50c5-30fa-8c75-942ef33aab42
  5 c04c4934-777d-53c7-8c22-b87c9b57a552
  6 b3a457ea-50ab-44bb-a2a1-931b9bece048
  7 35ea157b-d893-4a90-8df5-d4284acb4488
  8 8a8b8e47-ba15-7883-a14d-a733f480fcc5
  9 b87989bf-9a60-3161-a79f-f2cf18df4740
 10 8350d547-2480-0fa8-aedc-67b5b07b5295
 11 fc9d44ed-a350-554f-8f7a-06fef9c95193
 12 c4507145-7012-2724-8bfd-d55cc1fbe132
 13 19ffa4ca-0a82-2440-9172-3e7886b4ac5f
 14 887cf7f3-10c6-2548-8998-703fe4d661c3
 15 4d282a99-72b0-503c-8696-7b9740989703
 16 badcf7ed-5252-55fa-8fbc-6a884e13d8e8
 17 359dc2cf-3c50-88e9-ba04-44ad0f4099bd
 18 9061a339-6c82-43f6-bfe8-c86c344d9110
 19 d0257ffd-bd41-167a-b90c-23b0bd298291
 20 4824bbbb-4d34-48ff-b746-c9b479d3528b
 21 48719202-4ccf-3a3c-9059-921baa2f306f
 22 a1622a86-ebc5-2fda-9f72-1a893f407ff2
 23 22294d1e-977b-102a-bd0a-c06fdffbdbd6
 24 351df402-0396-1ad3-aa8b-85f7b4566868
 25 ef25407f-4a68-0ac1-9e2a-43ec10174a2e

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 0513544730522255841432110. Exactly this sequence comes out of new Random(238).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 361 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 25; the post has N = 25 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related