201208031940 xna7o

explained decrypted filler

seed 670

Metadata

Post ID: xna7o
Title: 201208031940 → 2012-08-03 19:40 on A858's clock
Posted (UTC): 2012-08-03 23:37:51
Timezone: UTC−4 · title 19:40 against posted 23:37 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,640 hex characters · 1,320 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
GUIDs: 41
Filler GUID seed: new Random(670).Next(9) ✓ verified
Run: Run 22 (seed 528,385,484) (seed)
Draw: 16 · predicted N = 41 ✓
Machine boot: 2012-07-27 19:02–19:13 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 8 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listkey: name+namerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 2,640 hex characters = 1,320 bytes = 165 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 41 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0528e34a-5695-643e-b212-7d1c778a5770
  2 f3fa44ae-341e-3228-b9ef-fa3e3bba5be4
  3 3d232f1b-fc98-0882-9941-11ecf64f827f
  4 bc1da3c0-749e-5b1e-9a48-4deda2147c30
  5 eaeb58a9-d3bd-601d-ac6b-e6dd5a8ab048
  6 e2858bad-fc77-081f-a15d-a9de26b7dc9e
  7 bc8539cb-4001-07ee-a0c6-488f17d08dbc
  8 97a543d7-ee84-5328-89e5-91be4474b0ed
  9 eae61612-74ff-7a62-ace3-107f57f4141e
 10 55c10523-0ccf-3070-9a20-97f180455cde
 11 a5707b0f-7f9f-8efa-b765-736367ec1b1f
 12 f292f981-c1f9-411f-88e8-2194febaa9a2
 13 e925ac62-d238-2908-a555-c72827f59a3c
 14 453dfbb5-6867-039e-9e29-737597c43197
 15 87869ed7-bc55-8b75-895d-7419bbd1806d
 16 570bdc93-9b03-42b1-9a32-30b6b5288d19
 17 ba50fcc9-481e-4f78-bda2-b47da1400e07
 18 5f0dbad8-5fec-3c56-9973-37266383ab4c
 19 97d5cc90-baad-774f-9660-8a05ce91c1cd
 20 461ca51c-ff83-6e3c-b3f1-14dba0b96b6b
 21 c95c0943-1f85-7c32-a8f7-fc2d1940b816
 22 c337fbae-d6ee-27be-a39f-3795601ede01
 23 d0fca46d-baec-2f51-a61a-f2babf3eae75
 24 cfbcf586-1f6f-0f91-a764-20558331a488
 25 d1415303-8d76-3737-897b-5d2097915fa0
 26 73c8514d-ceb3-405c-8f87-ab0345f5acf0
 27 805a9429-29f0-851d-a888-4b8327a86230
 28 ade96882-5568-78cb-8eae-26765a685099
 29 d6165ae0-7f8c-5ce8-874f-0052b92e752c
 30 8b2463c5-4d81-6000-9d3a-832668edcbd9
 31 d6e43cfa-fc53-4451-a17d-33910b8bc320
 32 8968d0c8-203d-869e-bff0-0653697b3a43
 33 ff36f3dd-7b59-6d9d-b3db-27bc474aae2b
 34 37e98c36-2773-78db-a13c-50f8a9d5ef78
 35 013fa21f-4b22-586f-abfe-cc2e8be8b69f
 36 26119056-344d-7abb-bce5-bec5ba9f4671
 37 eaf6845b-fe99-0aaa-8231-d49de56675e7
 38 33493968-9c85-8e1c-92c9-775386a651fa
 39 516a99af-e972-0f55-bb9f-14f66ce4d6a7
 40 33ec2eab-fa99-3d00-bd85-8a9a34ab8c58
 41 90f8f63e-e223-7e2c-9e62-d3c957a14a1a

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 63056005738420844376722034875648675708037. Exactly this sequence comes out of new Random(670).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 16 of Run 22 (seed 528,385,484): new Random(528385484), Next(8,64) per post. The RNG predicts N = 41; the post has N = 41 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:02–19:13).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related