{
 "id": "igmjv",
 "title": "201107041325",
 "title_time": "2011-07-04T13:25",
 "author": "[deleted]",
 "account": "A858DE45F56D9BC9",
 "subreddit": "A858DE45F56D9BC9",
 "created_utc": "2011-07-04T20:16:18Z",
 "permalink": "https://www.reddit.com/r/A858DE45F56D9BC9/comments/igmjv/201107041325/",
 "arctic_shift": "https://arctic-shift.photon-reddit.com/api/posts/ids?ids=igmjv",
 "sources": [
  "community-archive",
  "arctic-shift"
 ],
 "body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
 "body_source": "community-archive",
 "body_other_version": null,
 "body_hex_chars": 512,
 "bytes": 256,
 "score": 115,
 "num_comments": 58,
 "category": {
  "code": "F2",
  "label": "F2 filler: masked GUID list, seed 369 (tentative)"
 },
 "kind": "manual",
 "encryption": "decrypted",
 "status": "best-guess",
 "summary": "A masked GUID list: 8 GUIDs, seed 369. 3DES, key MD5(name). Open: the seed is tentative (only 8 digits).",
 "content_type": null,
 "cipher": {
  "recipe": "MD5(name) = 34A14A42E98FF96095AF56604E290CAE, 3DES-ECB",
  "algorithm": "3DES-EDE2 (two-key Triple DES)",
  "mode": "ECB",
  "padding": "PKCS7",
  "key_derivation": "MD5(password)",
  "password_recipe": "name",
  "password": "A858DE45F56D9BC9",
  "key_hex": "34a14a42e98ff96095af56604e290cae"
 },
 "plaintext": "529bf170a7ea486ca4ec48bcc59b05fa 2e8206baa90b07408bf9cb00940fc116 772cff4ff49e651293acaf1aa6ad29da 81874caa8b9922fb847aaa516703e0cb 45c81bf296d378ed997f1f6b70b9a72c 68ccbd645f2b0205b555dbe6550ca1ab e207a5eb8d6e2333853acc46158dd442 174aebaea7e55295b7b6ba83e3cefcbe",
 "word_layer": null,
 "credit": {
  "kind": "explanation",
  "what": "Its decrypted GUIDs are masked, not genuine v4. The sidebar held all eight in July 2011, and its first GUID's missing start is the sidebar's own value; best-guess mask seed 369."
 },
 "decoded_layers": null,
 "guids": {
  "count": 8,
  "mask_digits": "40627025",
  "mask_seed": 369,
  "mask_seed_candidates": null,
  "mask_seed_verified": true,
  "seed_table_layer": null,
  "best_guess": true,
  "note": "Best guess: only 8 mask digits, so a chance fit among 1,000 seeds is about 1 in 43,000",
  "start_from_sidebar": {
   "value": "529bf170a7ea486ca4ec48bcc59b05fa",
   "first": "2011-07-05T12:38:47Z",
   "last": "2011-07-05T20:55:08Z",
   "captures": 7
  }
 },
 "count_from_length": null,
 "run": {
  "id": "group-pre-automation",
  "name": "Before the scheduler",
  "type": "pre-automation",
  "draw": null,
  "count": 7,
  "predicted_count": null,
  "reproduced": null,
  "note": "before the scheduled app (Jun 26 2012): sparse single tool runs / hand lists (o5o4o, jbucr, jkuyr), 2011 genuine-v4 lists; no long-lived count stream to fit"
 },
 "known_solution": [
  {
   "Method": "3DES-ECB, key MD5(name); masked GUID list",
   "Result": "8 masked GUIDs, seed 369 (tentative); first GUID complete via the 2011-07-06 sidebar",
   "Explanation": "Encrypted, not plain. The archived body decrypts in full under ECB with valid padding, but its text starts 8 characters into the first GUID; those 8 characters (529bf170) are recovered from the 2011-07-06 05:38 sidebar snapshot (c23vtyr), whose fourth entry ends with the GUID's 24 surviving characters. Seven of the eight GUIDs also appear in that sidebar (its eighth slot is the name). Tentative: version digits 4,0,6,2,7,0,2,5 fit Random(369).Next(9) at offset 0; only 8 digits (chance about 2e-5). Corrects, which called it genuine v4"
  }
 ],
 "tags": [
  "pre-automation",
  "2011",
  "Encrypted masked GUID list",
  "manual",
  "key: name",
  "run: pre-automation",
  "found by this project"
 ],
 "title_zone_hours": -7,
 "title_zone": "UTC−7",
 "page": "posts/igmjv/"
}