201309091559 1m111y

explained decrypted filler

3DES(name+title) ECB, 24 GUIDs, seed 826

Metadata

Post ID: 1m111y
Title: 201309091559 → 2013-09-09 15:59 on A858's clock
Posted (UTC): 2013-09-09 11:59:49
Timezone: UTC+4 · title 15:59 against posted 11:59 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,552 hex characters · 776 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201309091559) = fa4066c6512455c386c1ad244f8c2ecd (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 24
Filler GUID seed: new Random(826).Next(9) ✓ verified
Run: Run 52 (seed 1,430,705,843) (seed)
Draw: 77 · predicted N = 24 ✓
Machine boot: 2013-08-14 07:34–10:34 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,552 hex characters = 776 bytes = 97 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201309091559 (name+title). Key = MD5(password) = fa4066c6512455c386c1ad244f8c2ecd, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 24 GUIDs as hex (shown below).

Decrypted: GUID list

  1 04d423eb-3626-2ddd-83dc-97d774e2207a
  2 2eb03b76-6535-155d-9b5f-ab594228059e
  3 d25c9ff3-cd8e-1c41-9d34-e6de0e2cc56a
  4 48136267-9241-7109-8a23-4be64b601061
  5 52a3b19a-82bd-1d85-b58f-ab150bc27dd6
  6 e625702e-2762-3c37-b4f7-450d87d800ff
  7 4507a5d3-facd-0bed-8a91-898aa0d22684
  8 0d5f4969-b8ab-7142-9cc5-7f2798334d3f
  9 6e51e257-c58e-1122-804e-a8537c5caed6
 10 ee940590-e011-7650-aebd-fb3c88606c1c
 11 d6a8e2de-5f56-704f-87b0-9d5aa77d5cb9
 12 0b337646-4a9d-3df2-ab50-b6841babc091
 13 21a28a6a-9e6b-4cf1-8a00-2dc0e58c786b
 14 f672ac26-78dc-11f0-9e7a-873c0c8e1459
 15 2d5e1cdb-9e87-120b-9547-1b55563e2d10
 16 01ef82d6-9f5a-72a0-bf00-23213ac83165
 17 33b17d63-6e85-02eb-89c2-c39eb1e11f2a
 18 9d18ea23-29ad-1cdc-ac70-af6945022362
 19 9b43c53d-829e-08a8-bef5-a9b17b03b7aa
 20 73f8a2f6-eaeb-1847-8b97-997c8efb248d
 21 a643a4d8-be0f-5af9-ae6a-fd878c1c6c2e
 22 c82b7255-34f8-46ad-8b9a-526c78641a88
 23 20ee5c3d-2ab2-54db-ac09-5616c095fcb9
 24 6468c0c6-b638-588f-b9e8-1c1197f0b636

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 211713071773411701015455. Exactly this sequence comes out of new Random(826).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 77 of Run 52 (seed 1,430,705,843): new Random(1430705843), 4·Next(1,12) per post. The RNG predicts N = 24; the post has N = 24 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-14 07:34–10:34).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related