201210260033 123x8r

explained decrypted filler

3DES(name+title) ECB, 21 GUIDs, seed 966

Metadata

Post ID: 123x8r
Title: 201210260033 → 2012-10-26 00:33 on A858's clock
Posted (UTC): 2012-10-26 04:33:19
Timezone: UTC−4 · title 00:33 against posted 04:33 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,360 hex characters · 680 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210260033) = 3ae6a54fb614c06f6bac04db96388a9e (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 21
Filler GUID seed: new Random(966).Next(9) ✓ verified
Run: Run 38 (seed 1,045,884,937) (seed)
Draw: 30 · predicted N = 21 ✓
Machine boot: 2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,360 hex characters = 680 bytes = 85 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210260033 (name+title). Key = MD5(password) = 3ae6a54fb614c06f6bac04db96388a9e, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 21 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5a06515f-9193-3026-ad84-4851d29ccec5
  2 22130b40-8608-292a-9040-600d8018af8c
  3 2334e888-746b-88b4-bb48-899e02e6292a
  4 2ee7240d-c916-689c-b989-004102401eed
  5 1c5c76cb-8ad9-32fa-a4d5-25d2f4a0db9c
  6 768f442b-538b-66a2-9055-1cf733e249fa
  7 7c5b6416-fd91-6faa-a143-1844aa87c8b3
  8 8a3c111e-a462-04b7-b4a5-f31017a6eecb
  9 d8ea1cf0-f3d1-46c9-aa45-6a3f7c23183d
 10 ba500f79-6530-459f-90f3-6d784b9f8b4f
 11 1cc5f870-d8d1-875d-87d4-7899558c64a5
 12 389d30a8-2ec7-556e-9023-f5a404551ea4
 13 e1e05bef-7510-61b2-aabc-0a8276ec1c9c
 14 8754d8a0-c731-0eb8-ba55-50fedc3db62b
 15 0d9099be-b152-1238-af4c-e52e0d9d75c0
 16 f6c3cc3f-3360-2746-b8d9-c2556784d5a1
 17 8508f4d1-1283-81b3-805a-d10b56aa1fc9
 18 f0aa5bb8-a5a6-819b-bfbc-5f95d4d47dd6
 19 d759c614-01ec-76ab-9f94-86b2c66986f0
 20 b24ab263-efb2-3e4a-add0-660acd14aaf0
 21 b46534c8-ea65-132d-855e-ecb1d3a42599

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 328636604485601288731. Exactly this sequence comes out of new Random(966).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 30 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 21; the post has N = 21 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related