201210090006 116h3j

explained decrypted filler

3DES(name+title) ECB, 18 GUIDs, seed 864

Metadata

Post ID: 116h3j
Title: 201210090006 → 2012-10-09 00:06 on A858's clock
Posted (UTC): 2012-10-09 04:06:46
Timezone: UTC−4 · title 00:06 against posted 04:06 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,168 hex characters · 584 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210090006) = cb3f3d5c9ae41b065cdf3ded3c92ab82 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 18
Filler GUID seed: new Random(864).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 492 · predicted N = 18 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,168 hex characters = 584 bytes = 73 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210090006 (name+title). Key = MD5(password) = cb3f3d5c9ae41b065cdf3ded3c92ab82, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 18 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9db61493-902d-0c70-897a-f01e41ed3545
  2 4bc02902-8acf-2572-be01-39cf060fec6f
  3 1716e55c-e9d6-68cc-ba26-e5f6ce31a7f4
  4 cd25973e-6452-829b-ae95-4534a4781179
  5 f15440a8-42ba-2bcb-822e-68213a1c3356
  6 5e8a3310-961d-52db-8d8e-e141d0391adb
  7 c0a4c83a-365c-0678-877c-662191b3372a
  8 ecaa6e48-7c16-8442-978e-12a0cb5fbac8
  9 ad886181-f5f1-7b62-8d73-9da294a7f0af
 10 12f0d031-414b-77a9-af0f-b7c68ad33820
 11 e1a1c9fb-64b8-79e8-821b-9ee25dc6c6ed
 12 ac8b2a7e-392f-006f-8666-91652eaa5ac7
 13 1dfa6824-1bc2-5cff-997e-fa69db78f88b
 14 e78c2b7b-514c-8978-8abd-11963f0200e8
 15 0b6a90c9-f380-68a8-8b3e-64d4b73bfd6b
 16 5f074d0d-a0e0-53ea-9989-6f597fdc99a0
 17 46c5235e-dbb6-073f-b7ef-fef3d7d3e6fe
 18 89377708-41b7-62f7-8f36-c4a24de1a1f4

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 026825087770586506. Exactly this sequence comes out of new Random(864).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 492 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 18; the post has N = 18 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related