201206261048 vn0wr

explained decrypted filler

seed 658

Metadata

Post ID: vn0wr
Title: 201206261048 → 2012-06-26 10:48 on A858's clock
Posted (UTC): 2012-06-26 17:46:21
Timezone: UTC−7 · title 10:48 against posted 17:46 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,296 hex characters · 648 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs: 20
Filler GUID seed: new Random(658).Next(9) ✓ verified
Run: Run 3 (seed 1,063,142,882) (seed)
Draw: 4 · predicted N = 20 ✓
Machine boot: 2012-06-14 10:25–10:26 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 12 · 2
Tags: automated (decryptable)2012Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

CEF3E1B225C98E12 D47FA2C91371A755 E94B47CF51E480D5 A139A279F22C0E8B 9F29BA8581B605F1 2C403C002476702F 9EACE4390C8C22B5 41A3D6DB191B5CE2 E3CECF8FDF8104A5 DDAA5CC834110F45 921AE1F4BF17A02B 5DF73466874B43ED A369F7017D4EB326 4DB5BBAF15A79131 F271014FDF5B5A86 288143BC7F1F1CDF 0772A474FAF54D3D 87C622CCB2DC667B 3A3E8D004F9DEA51 7317447AB8863BA7 E55026B3E59354A1 6D53637CF4A50ED5 F297F763A533A70D 4DB022AEBF8213C4 399E2BD191C2A81F AC2837ABF99FF469 88C97B1801A42368 C59DA0AAC6E43D8D 274ED40EC644C151 E316F648F0E20B7E AE7D8644420EC25D 63A9FE58D332D80B EB069968BB8F3BB4 5BF07D9284699076 FF8970DFB1360E85 89247EB8600E2596 B5FFD729FB0B3E95 7C2F071AC9A9ED44 7832DF63B29119D1 3C380F840778A50F C8F94C43E4EB0AE7 68A0417D4CD9AD65 600BDC1828046147 35B456C38FE1CD23 989DB746FCA1782F 66735BBB0C7E8C15 AD9B0C846F183158 E13BAA1C059DC0C3 F26812E1ECFCEB1E 4EE7BA9CC6D46200 90651680D9424C42 5D4C4267A7EFB317 41FBF13094B3B70C 8A1286DFEB2301A2 B0DAE19BC7D59261 73F029F638047DCB D5CB684F5179AB48 87128F18E94A5AC0 009D4C1467B66E1E 6A5033DC5FA4C07C 46AF8051DE12F619 C2B4920C3D85D3E1 691D79ACE4A1F1C2 AF9414E96A089048 743C8E817E2AAC87 5D95D8F83E4E6439 8F29BBB72A527677 365ADFE230D69E0E 8CE6E5B42E767723 03359A7DED1CAD70 E7808D6CAA484C49 AD3A567C0C48C979 7B1E1ECC3EAFC01B 674C27A69C40173D BA8AD17D5FAD60B1 6F87B9EEB04F2B54 817A640F7F5AA4E1 9B7E8F5D45F52F46 E92CC894620DAC84 D751E50F1957FB73 5DACFFBA8FF64DBD

Read the ciphertext. Strip whitespace: 1,296 hex characters = 648 bytes = 81 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 20 GUIDs as hex (shown below).

Decrypted: GUID list

  1 65d083e0-da56-4217-af36-42ab92ed8163
  2 9d9a4bd1-4028-7ad7-902e-6cd11b05f8b9
  3 21e5c930-31d3-6b41-a9ff-211301676956
  4 15411427-b258-052e-b402-32eca98e7ce9
  5 e7c20421-f502-2253-9be6-1a5c8e617496
  6 4a4d39c2-0b33-5c8f-b20c-2a3cdc139cd5
  7 8929e27b-d376-6d4f-af08-8aa63bf54881
  8 7654ca5c-2cf4-4eee-8efe-83b2dfd4badd
  9 76bb5b8d-f55a-3bbc-9dcb-9200a083382a
 10 50d851bf-86c2-81d0-b412-63ab189eb2a8
 11 b73fa080-d790-0116-9ff0-f3b2a5e01499
 12 87123a23-9450-1664-bdfa-ebd7e16981d7
 13 2ec02c1c-67cb-8765-b813-0410b4abcf61
 14 077b8704-5417-78ac-83fb-ed23b89273a1
 15 2f119578-236f-58ef-9298-32faad16717b
 16 c673b4e3-cbdf-83f9-aa28-42c735b7ec70
 17 8c25ea24-065f-4f76-83b2-74fca6c2a0a9
 18 b35e0e92-8066-88a7-abce-6596940e9270
 19 1282a936-3fe0-4197-80f8-1a160f7c2f8f
 20 91af57bc-de7f-01e2-96e5-27444edc14dc

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 47602564380187584840. Exactly this sequence comes out of new Random(658).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 4 of Run 3 (seed 1,063,142,882): new Random(1063142882), Next(8,24) per post. The RNG predicts N = 20; the post has N = 20 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-06-14 10:25–10:26).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related