201206261119 vn32i

explained decrypted filler

3DES(name) ECB, 23 GUIDs, seed 198

Metadata

Post ID: vn32i
Title: 201206261119 → 2012-06-26 11:19 on A858's clock
Posted (UTC): 2012-06-26 18:17:20
Timezone: UTC−7 · title 11:19 against posted 18:17 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,488 hex characters · 744 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 23
Filler GUID seed: new Random(198).Next(9) ✓ verified
Run: Run 3 (seed 1,063,142,882) (seed)
Draw: 23 · predicted N = 23 ✓
Machine boot: 2012-06-14 10:25–10:26 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,488 hex characters = 744 bytes = 93 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 23 GUIDs as hex (shown below).

Decrypted: GUID list

  1 fd310e56-e1e8-1fca-a37a-9f48648500f2
  2 5640779f-9c84-8233-8c54-d64eb2ab1e8e
  3 cb2aa143-9846-1edd-b4e0-e84f603184ea
  4 a46168e0-14ea-7eba-a471-3673c69a96e2
  5 87738435-8cb5-5e29-b2ac-0f6a2598662b
  6 9ceba1f0-0291-57c7-9863-b1b009860b65
  7 72da8440-0011-5dd7-b0ac-61c548c8481c
  8 66dae076-d1b4-6b52-8640-8a2d89dabcb3
  9 56a3a7a0-61f1-4679-9832-6e6fa7bc8aed
 10 41ce5ccc-ab3d-2c63-9417-900f3eefa0a1
 11 de1e3b7f-72df-1732-826f-d2b4df854783
 12 bf5f7bc6-c673-094b-84f0-6e78c3edb5b7
 13 f9d6dc03-a196-6f6b-bde0-e675b447d573
 14 5c720f3e-8132-43ef-931f-855fea95e2ec
 15 798e1e35-f356-5dcf-b5af-c8b5c1741ee6
 16 93f8df67-a7c9-63ab-9d04-614319abc3ed
 17 a5da292a-590d-0577-830f-4d9de253f0ca
 18 4e9ce62a-b7bf-64ec-ac17-3094c4df797a
 19 9d4458f4-b072-047f-8aaf-cd602dbe6a59
 20 5930e36e-f1bd-82d8-9689-8846520e9663
 21 81aacc90-10b2-1ea1-b4e7-b52a604a7974
 22 2de451a5-44ed-3f0c-9e73-abcea8b6aaee
 23 594ea513-102e-476f-8bfa-c2159819bfe9

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 18175556421064560608134. Exactly this sequence comes out of new Random(198).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 23 of Run 3 (seed 1,063,142,882): new Random(1063142882), Next(8,24) per post. The RNG predicts N = 23; the post has N = 23 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-06-14 10:25–10:26).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related