201210081846 115vt5

explained decrypted filler

3DES(name+title) ECB, 29 GUIDs, seed 786

Metadata

Post ID: 115vt5
Title: 201210081846 → 2012-10-08 18:46 on A858's clock
Posted (UTC): 2012-10-08 22:46:32
Timezone: UTC−4 · title 18:46 against posted 22:46 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,872 hex characters · 936 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210081846) = 4c39e7b63409fadc6ca726bc83b49d40 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 29
Filler GUID seed: new Random(786).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 476 · predicted N = 29 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 7 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,872 hex characters = 936 bytes = 117 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210081846 (name+title). Key = MD5(password) = 4c39e7b63409fadc6ca726bc83b49d40, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 29 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a5e2b829-3ae4-3270-8240-bf24bb3f02d3
  2 1ff1f9e3-5abf-3a0f-9cd8-ce2137d26195
  3 b4f1aee9-54d2-117d-9134-9e463fc2d723
  4 1913de78-2735-26e7-bda5-2895c3cd007a
  5 a036e231-2a44-03ea-85f5-238ee9581e0c
  6 4199b9e3-b43d-3eee-84d4-d4b84f7cf520
  7 1578945b-9375-03c9-a1d2-545f4745c797
  8 1f5e5aca-0f2c-6479-bbf0-6793e3ad0411
  9 a2a8b3df-bdcd-16a7-9866-24198216aebb
 10 8d28ab7d-9de3-1eb3-a01a-5a757a8fc274
 11 4e00004c-b94c-3f30-bde6-7a7e35c2a728
 12 86d8829e-46b8-0394-b501-db9b9bd3de24
 13 d75f6487-adff-8ffa-9ce9-8d0f42baf79c
 14 2bacd26f-138c-3454-ae46-a87e19d58ea6
 15 7e948ae4-195c-11c7-a2b3-71e54f96d243
 16 a033d25e-0ed2-8693-a2ed-783a5be4ec2e
 17 3b6c3415-7a98-2fb9-8bf8-9e5457448ae9
 18 4dcf2a22-56df-2e48-8e09-fb991fc0d8fd
 19 e13d4fff-2ea5-8d10-baef-70a1b0bb3433
 20 03d5bc47-bd80-5c6c-818a-a05b93c01e7f
 21 465d53c7-cf83-26dd-b53f-a44020f37db9
 22 9deda850-a449-6fba-a8e7-9f20bf6b35f5
 23 da062da3-b57c-7ac8-ab67-34ae77cee7e6
 24 40f62f98-5b28-5bee-bc9f-29e7a8ed9412
 25 26b7b43f-ad1e-6865-bcce-276e840c1cfc
 26 1685b245-75a3-0a7c-bb16-64acc71c1432
 27 295acdc4-127f-6003-b928-a8358977b924
 28 0fabe2f9-33f0-6d43-b620-c7c8e894f5d9
 29 89d03852-aab8-585a-bdc2-a42e2f4b0b0d

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 33120306113083182285267560665. Exactly this sequence comes out of new Random(786).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 476 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 29; the post has N = 29 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related