201210100500 117n6n

explained decrypted filler

seed 366

Metadata

Post ID: 117n6n
Title: 201210100500 → 2012-10-10 05:00 on A858's clock
Posted (UTC): 2012-10-09 20:00:12
Timezone: UTC+9 · title 05:00 against posted 20:00 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,448 hex characters · 1,224 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210100500) = 22b169e942196af0cb2de8dc762ce3ae (name+title)
GUIDs: 38
Filler GUID seed: new Random(366).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 510 · predicted N = 38 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 3 · 1
Tags: automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 2,448 hex characters = 1,224 bytes = 153 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210100500 (name+title). Key = MD5(password) = 22b169e942196af0cb2de8dc762ce3ae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 38 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b70de939-d866-8e36-bce9-f349f93bc49f
  2 2621cf69-1903-1a57-9b90-baddef031e50
  3 56d34c24-c8d0-575b-920a-6bf05490aab5
  4 9a411d03-7715-6e0b-b5cc-1ba89d08af39
  5 00a89263-95bb-4c63-a0ef-654ddededa44
  6 62d5d3fa-5bf9-3a39-9141-4518f5ec77e8
  7 1ea92f5b-b917-85a9-a79a-6b872823a408
  8 0cbc4e92-bf7b-071a-8820-4dba90fffc57
  9 4bcf0c29-3b2b-2370-b978-c8851e15a0e6
 10 10866425-24af-2616-9e95-ed7baaa35012
 11 b3bacbd9-cc76-8230-b0bd-d807680fef03
 12 c44c20ff-1638-1707-8c3c-6ed6d2d817fc
 13 223588a1-1114-2e3c-85fe-cc77233b9469
 14 25d0dbef-a70b-7339-a5c8-328f8297bad5
 15 41b6d965-3634-1fe1-a1ce-6447c8f842c5
 16 36844f4e-d9a5-53e6-a5f2-d9c270e40df9
 17 73344c50-c3b8-6914-a2ed-122565ab8a56
 18 db8caa4f-9f6c-850f-89d8-f2ca94cec06c
 19 698a608d-ff8b-58f6-9f8e-8a097177fcab
 20 5923a118-c46b-09b6-b2c6-4cc7eba246bf
 21 b7bf04c4-cf3c-45e6-bfa3-7c64e798c34e
 22 27a822ad-d3f3-55db-90c5-975d47a6b6e3
 23 cb80898a-9cdc-76b1-be0a-30ea79ea0741
 24 6e98899e-16b7-8235-8f98-28cc7cc6b565
 25 ee4580a3-ebce-549a-ad57-fbc4cc61d2dc
 26 73ccc6c2-039c-8faf-8f9a-1e986d06b1d5
 27 65e2a69c-43ca-5663-9978-d0f362a3ebbf
 28 0dbcfa28-d5ee-4e1e-9f21-f5272a4581da
 29 a465a770-8802-5a57-94d9-d151818f8c69
 30 03736192-101d-71b6-9510-086ef3094a42
 31 7cb138a9-b91e-24d6-ae1f-a30f866f7f3a
 32 ea6949f5-6335-7a07-a5bb-0211e339cd49
 33 bde58224-5e22-4337-84dd-f5f609444437
 34 98541178-ef39-14ab-878b-15e4ed8823c1
 35 31f0d7ad-f84e-30cc-bd3e-c93842012858
 36 0e283d45-f41b-5f3d-a0ef-2d1c3fc97da7
 37 980500df-fba0-1ad1-8f5b-e6d657f86451
 38 1ec9a76f-6064-7015-af45-4d39eeb907b6

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 81564380228127156850457858545727413517. Exactly this sequence comes out of new Random(366).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 510 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 38; the post has N = 38 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related