201206261047 vn0wf

explained decrypted filler

seed 78

Metadata

Post ID: vn0wf
Title: 201206261047 → 2012-06-26 10:47 on A858's clock
Posted (UTC): 2012-06-26 17:46:15
Timezone: UTC−7 · title 10:47 against posted 17:46 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,424 hex characters · 712 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs: 22
Filler GUID seed: new Random(78).Next(9) ✓ verified
Run: Run 3 (seed 1,063,142,882) (seed)
Draw: 3 · predicted N = 22 ✓
Machine boot: 2012-06-14 10:25–10:26 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 8 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

36BAF1432EB35662 E623B363D1719095 2D5009608FF27F9F E3A6D19CA9F5B5C8 CB2D6855DEC0C2A5 E29439BF4C0C4107 1ECC3723E0606654 6F8C0BAA11F16DE8 A9D33A099203A482 837C0B46BD3D7565 A349010B9D8516BC A8C3A82886FC700E 211A107BFA81B867 0882C88FEF9DA797 D8C494E91A99C0F1 3F6C56CC64B7D830 89F4F32573437D76 FF1F024B1B2DB3C2 31C207C5FD7597C6 A01595B6683D1C16 84D42AE27B3E997C 981E9B360F4370D4 90A37D4EE169EB8B 89AA5282E3A72D61 2427D776B01C679F 87537508471853EC D4978153C403841B F9CFB1A480F8CCCB 539A36FAB233B4AA C7E1B1DB7979937F D014F9A581342456 5EA2C463A2F43E06 B42E687EA1804EA7 AD8668F0A0972B27 7CFC7EC017956021 C9C5A4BD80646F45 5547F198D192B5C4 4D19C8ED32AE1FA6 1CF49FEE5E07AEDD FF86FFE5A6CA5216 28B8B3E093A03AAC 26897B54A1482105 B4BD7D644FF5C0D4 E24828CAC916196D 966DF9BDC59D68BD 9E94FD775DA2B71E 246A4A8DB2E581AA 89267E19FD03FB9A D60096243890AE32 31F6394CD5CB43F8 C9EDA9813FC6FB53 003B993B846EEBED D395C1DF70F01FA9 003715DEF6AA5B3C 92EE876D15DA2072 6DA21B0C5D14434E 7B855E76E8E6AFD9 D5BC4BEECA99A51E B77028CC18A408F1 019A3AF3EC0FC1A8 1370EA15B655273E 6D9B203260377799 FF80CBB7616E62F3 DB426675635654F9 917C177CF5FFB459 09D443FAA84B2A38 4F7281682CD8466D D3174483E88E7959 9CA39E10B9398EDF 219BF4C5C975C4BE EA7A571FDE6E3172 B0397BA3D5D59139 2CD3F5998B7DBA90 F799CC00D8F794AE 31D8D3508125B28B 39CF69AFCFA14832 19C8CBF423F12356 7EDD1EB27DE95C9D D2936BA14786D68E 09839D9EB960117A 2048C032A4005232 380FCD497BC73109 E1953A26461DCD32 1A7364E387389006 B6C994E1D913590B 0D549DD12DAEB857 4FAEDE3F32BE5C68 C9BFE40CDC25ECFD 5DACFFBA8FF64DBD

Read the ciphertext. Strip whitespace: 1,424 hex characters = 712 bytes = 89 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 22 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d86ca6ad-8e78-4d4e-a17b-a51251142639
  2 c3e06a0b-fe32-66db-ad1c-9f6c18b44a84
  3 f86821fa-b288-2e89-a32e-1aab80449086
  4 3f4db553-89be-1811-9105-80e2f10febf8
  5 632c54da-fc61-3323-8856-1132d9bbb8c1
  6 e84e4229-5f49-6387-a64a-e0c26af09687
  7 53e0b0ed-8280-7503-93f0-855da28b77ab
  8 266d1049-0cfd-5367-ad2f-f9b422de63b1
  9 9b7066cb-5d77-528b-b45e-39cdbbbf2a67
 10 22b2d20b-26e7-0a8c-8389-4e97c89ef6b2
 11 99af913e-0a8b-6ee7-89da-a425e813033a
 12 8d129e05-2ffc-3410-802a-a8a475726670
 13 3e95317d-c912-2dcf-a766-6278dd3f30a7
 14 20744cb9-7e63-0cc0-be89-5e97d2eaa851
 15 ceeb0070-423b-5653-8cb7-4130ab2fe46f
 16 76c92969-bb25-67b6-9c31-4afe1c3dde57
 17 2ed4860b-f15b-5733-95b8-bcf86111b957
 18 a7af6de0-f0bf-3577-ae9b-9ba1fabc4c12
 19 59cffcaf-1fe7-785a-8782-8e69db762355
 20 e4e3af85-eb4a-4129-92ec-19b724359bf0
 21 ef66e544-7842-1da9-825d-7befaac6c91c
 22 000035a5-724a-84c6-be2e-dc94220df360

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4621367550632056537418. Exactly this sequence comes out of new Random(78).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 3 of Run 3 (seed 1,063,142,882): new Random(1063142882), Next(8,24) per post. The RNG predicts N = 22; the post has N = 22 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-06-14 10:25–10:26).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related