201208031700 xn0rg

explained decrypted filler

seed 247

Metadata

Post ID: xn0rg
Title: 201208031700 → 2012-08-03 17:00 on A858's clock
Posted (UTC): 2012-08-03 20:57:40
Timezone: UTC−4 · title 17:00 against posted 20:57 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,640 hex characters · 1,320 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
GUIDs: 41
Filler GUID seed: new Random(247).Next(9) ✓ verified
Run: Run 22 (seed 528,385,484) (seed)
Draw: 8 · predicted N = 41 ✓
Machine boot: 2012-07-27 19:02–19:13 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 5 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listkey: name+namerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 2,640 hex characters = 1,320 bytes = 165 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 41 GUIDs as hex (shown below).

Decrypted: GUID list

  1 968d6604-a4e3-6544-91dd-8374087d6969
  2 2bad522f-a6f7-2794-8fe9-ff94f82a653f
  3 0bb55958-0581-3791-b894-9491eaa06fec
  4 f9a49195-ff67-263d-88d3-6e932478bd2e
  5 adb22267-8fde-6ec7-ac01-5eb033551531
  6 bbfa6b5c-d6ae-3960-a65c-7b13708e7166
  7 4df9349c-34ad-5f2f-b730-02ec84047e7c
  8 038216eb-1e42-3a11-90fa-5d9a2b546eb8
  9 2f5cd783-6bd5-4471-92d4-fc55b7a11859
 10 0ff3220e-7c69-37e4-91b7-e8da94adec31
 11 83613e80-a16c-23dd-bab4-b5267e7bb786
 12 93b0467b-4923-22a4-8a72-c6f44abcbcb6
 13 93cb0742-0673-3d91-a050-efa174b51416
 14 68d91dd4-691a-8969-83bb-31840e3c2a24
 15 f35e17d4-3d75-7b50-8e52-af9a16e7f4f2
 16 c3ac0af4-6b2d-23c3-90fa-a28ce92cc001
 17 c5e78575-0f3b-6b93-b5f3-5edf0d0c1c76
 18 07983466-0611-171b-b32d-5cee1eaea4a0
 19 e4768c4c-b587-39a0-b39a-e14ba5a54f16
 20 cd8d4cb5-eba4-8068-ba89-0e9b755ee962
 21 aa9cf444-8ad1-592b-a04b-380877f3bd23
 22 2d7114b9-ef93-44ae-bda0-413edf7ce200
 23 5858696e-ab9e-6937-850b-e56e82fade29
 24 45e9abd1-774f-2607-9d2f-40d79902ab86
 25 e54c9ddf-81ae-835f-971f-630e4318713b
 26 069b5123-11be-322b-956b-8dd62fdfa591
 27 730d2705-545a-2826-aa12-f47ad8de0477
 28 d08dd29f-bf31-6415-922c-e834d511e9e1
 29 a2cfe896-af6d-6f51-98f5-d16473dd2fa2
 30 6c4d512d-85ec-0346-85a9-329d65294a59
 31 a36e4546-fe50-383e-9780-249fcd952e74
 32 8b4c3288-3dcd-4aca-a51d-9d685cbf6a42
 33 7014fadb-a374-5797-bf1b-e845916ad0df
 34 927ecf33-f7e5-155c-acf4-6753f3d488fa
 35 63e14855-cba9-8707-a5b9-3bac0ee008df
 36 028dc0eb-33c9-4a6d-8d9a-57b36c21c717
 37 4fb7ed3e-05f9-59eb-b625-9c5c3497eb7e
 38 c547016f-f885-615b-bc7a-92701f90d7b5
 39 d788c985-167f-5e81-9f1c-a0b679e5fac6
 40 022e772e-0b74-1836-b4b5-e323366c8790
 41 87ff72ef-1c7a-10c5-89ec-9ad5356c4f53

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 62326353432238726138546283266034518456511. Exactly this sequence comes out of new Random(247).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 8 of Run 22 (seed 528,385,484): new Random(528385484), Next(8,64) per post. The RNG predicts N = 41; the post has N = 41 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:02–19:13).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related