201206260905 vmuiu

explained decrypted filler

3DES(name) ECB, 23 GUIDs, seed 980

Metadata

Post ID: vmuiu
Title: 201206260905 → 2012-06-26 09:05 on A858's clock
Posted (UTC): 2012-06-26 16:03:29
Timezone: UTC−7 · title 09:05 against posted 16:03 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,488 hex characters · 744 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 23
Filler GUID seed: new Random(980).Next(9) ✓ verified
Run: Run 2 (seed 1,054,905,639) (seed)
Draw: 7 · predicted N = 23 ✓
Machine boot: 2012-06-14 10:26–10:31 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

EAD627EBBDBD9309 DD03B3EFF97BB9B4 3404CD1968512CE0 279867DAFB9D744B 11A6E1BA78720FE5 C1A0D4B66638B667 4EA81FEAC2C56C6D CCE2B3E06CAB48C7 DB2AB7F2C3A7722E 6F40451F5F75C3F8 6A553063F51057B7 50C5C015179EAD87 944148971501560F FE3FF12E9CC901BE 3BB63F8B0CCFD305 F0E9320E8815F73A 87DA430D2B6E52C9 864E35E5696F2971 7A5B2F9078EC85F0 09F2A1E921696377 4CA02A8E97396C3A 0B85C3F8AED38A1C CF7C9B038003AF56 DFFEE1A2737DD560 DEC144E9883E2F1C EC6D270D5B632EDB 540B70CC95A7954F A3C375893A922FD2 0DA18A6ADA137593 D50F821614A52EE9 D7A8530485EFAA27 CFEADC3ED351684D C992A42D04B2B63F F012284650F09C48 13CDFC694348B7AE 81C7EA072C852A0C 22AD16C92A699105 B0F7D18908E246A8 6FEEF3EBA601D6D1 F34065BCDEFB6F6C 61B5A8FFEF6A0625 5C7DD47E177C559C 0AFEA2D316289368 06BD1FD8756190F0 B937C7DD6A2C7164 E2D557D1872B003E CC0013CBD2212CA3 1A8639D404A8A72C DDB9FC46EBF5D9DF BBA1100AA592BE04 9D04FF1BA0D3CFE9 59F859406DEC8D97 DC731B8A5F3F5538 0CD59E0A147C6123 EC6890E24406DA10 B1A2DD677133BD72 C354CEC079C275F4 D4307AF0C4ADCC1E 24AC815647488CCB D73782C35D7F6FF7 39469F091258251E 1027FD9EA27A7C34 D022EC345DCF1AC5 E84E22E89CACCE69 567D2DA6B4EE7D5A 891CE7A2C5FE0395 3E1B9EC68C28AF8A 9C3467802B573FD8 1A47FA7E8F517D8D 1D38C545160F940F 6D34B5C8084CD769 BF9BEC9F82CF501D 82880E80171E2DF3 3964526258451B84 818BBD16D0F14BBF E2721A2AC7BD726F 79F74C31F499EFAC 831855E89BC7ADB0 FD7A359FBFD2F93C 75D76F84E1462B3E C37057D55869C8A3 56488F444901EEBB C166A839A750E045 C7D7952B567B9543 AAD4B27B197B6875 5204DE611C7207B9 7B783D907563264E 662E7039DCCD7F7D 0775D8312A6C1DE9 DEF04F11EFC56E4B 78F2D97A99809ABC 5157DB7FF61B0458 5DACFFBA8FF64DBD

Read the ciphertext. Strip whitespace: 1,488 hex characters = 744 bytes = 93 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 23 GUIDs as hex (shown below).

Decrypted: GUID list

  1 10f18679-9ac1-61e7-8157-fecd49f92ba4
  2 485de770-1b45-3dcd-be21-7388ae2585e6
  3 df4c1e9f-1368-67b0-83c8-e82384ab1f46
  4 d89e7d15-b47e-6cfc-bb75-f42d72817467
  5 e0ee75b6-d96b-5029-9750-bf4c635b9b54
  6 8308f9ed-9ae2-8d67-88fb-6e26a67100f5
  7 06ec8e97-efb5-0d02-bf2a-424b75cceae8
  8 60e3d181-0b55-0248-9b2b-3d7a9f06e1e7
  9 d6e2cb14-d22f-139c-ae54-d293333158ef
 10 dafa53ef-4b33-5a64-9b19-bd4d0a49b85f
 11 b7ef5767-5dd3-2e1b-998b-87f08d57f286
 12 03e9ffc0-43e7-5c34-ba2c-1867d2b89286
 13 b8e25a25-8e47-3caa-a567-a8cbd5f84509
 14 968fb144-138d-25c3-9f82-8644511f9807
 15 c288332a-d4d9-8041-a325-f432e1a00440
 16 dbe37cee-9419-07a2-b1c2-7664a6133943
 17 294be9f2-bcc4-774f-9fa0-dc4f30e7e0dd
 18 71a78ad3-1eb2-5d54-bc7c-11e9f1874233
 19 f7079fcb-171f-13d0-b993-1e366fceffb1
 20 2f8b360c-9b19-6659-bbf8-7596c167a1ba
 21 5ed6d59e-482b-0d08-9377-f655cdca6f1f
 22 451154cb-390c-293b-8381-259bad786797
 23 cd0aaea7-ca0f-5a66-8243-8a40e6fb4794

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 63665800152532807516025. Exactly this sequence comes out of new Random(980).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 7 of Run 2 (seed 1,054,905,639): new Random(1054905639), Next(8,24) per post. The RNG predicts N = 23; the post has N = 23 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-06-14 10:26–10:31).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related