201210070845 1132zx

explained decrypted filler

3DES(name+title) ECB, 26 GUIDs, seed 972

Metadata

Post ID: 1132zx
Title: 201210070845 → 2012-10-07 08:45 on A858's clock
Posted (UTC): 2012-10-07 12:45:04
Timezone: UTC−4 · title 08:45 against posted 12:45 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,680 hex characters · 840 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210070845) = 5bf81f86e484191dbe914ee5a1f6f03e (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 26
Filler GUID seed: new Random(972).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 374 · predicted N = 26 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 7 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,680 hex characters = 840 bytes = 105 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210070845 (name+title). Key = MD5(password) = 5bf81f86e484191dbe914ee5a1f6f03e, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 26 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b39ab2b8-de97-4015-8911-dce57bede678
  2 e70802c9-266a-0b39-aaa5-3e539364aedd
  3 39006998-cb62-195f-a96f-fbe2fa3ac22b
  4 1ea50f45-5876-0ee5-a2c2-ef6816ce05f8
  5 d4381cc8-21eb-0e59-8854-ac041721c853
  6 014123fb-dda8-856f-8fc1-94d6e4a2a54d
  7 9ae88a08-19fd-3226-a58a-2550f303cb3d
  8 4e243103-f1c9-0ee0-87e9-9b04a48c848d
  9 5bab8e75-154e-281d-88d4-bf729b6f4ddc
 10 9c3532d9-e2ce-6fe1-b5a5-5bcb959e2144
 11 ee6bf4b9-10a1-3cd7-b6b6-e85bfd6f8e80
 12 c46973ec-b555-21d2-a5b2-34f6bde79d00
 13 f492e4d9-b9ff-7c5b-8fb3-c5bdf817c436
 14 c8f620de-1630-1af9-87cb-98ebd6e9abf8
 15 7a296156-e04b-3bff-b51a-5849d4ff415e
 16 514787c5-6dc0-027e-851a-c9c5d54e33a5
 17 034d938d-a444-42d0-af6f-624d5ccbda1c
 18 99f79295-cd84-5e5c-b0f0-64b54681882c
 19 7f14970c-8ede-8bbe-ba61-c57525d1946a
 20 d489ff40-bef3-627b-bc94-69138e0e24ce
 21 c5ce3fb2-7304-8085-b748-d8756b728058
 22 8cfd54b9-a3e4-251f-b796-1ef5a9827a5d
 23 7c872041-5959-2925-a56f-4f1784669ecb
 24 40a83e06-032d-5ea2-b296-8c5896f6e9a7
 25 4971765f-0913-843f-9429-c3e01c056baf
 26 332350bc-b5f2-6ff1-ac6c-09e8eff899b5

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 40100830263271304586822586. Exactly this sequence comes out of new Random(972).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 374 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 26; the post has N = 26 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related