201206261139 vn4hq

explained decrypted filler

3DES(name) ECB, 19 GUIDs, seed 662

Metadata

Post ID: vn4hq
Title: 201206261139 → 2012-06-26 11:39 on A858's clock
Posted (UTC): 2012-06-26 18:37:37
Timezone: UTC−7 · title 11:39 against posted 18:37 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,232 hex characters · 616 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 19
Filler GUID seed: new Random(662).Next(9) ✓ verified
Run: Run 3 (seed 1,063,142,882) (seed)
Draw: 36 · predicted N = 19 ✓
Machine boot: 2012-06-14 10:25–10:26 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

C3AD73A8AED19B0D 6A5DD733F4B6A92A E147ED06857F577A 88BC6CC740B0F3D5 465319F6DC5EC49C E792621B88B37891 4AB6A6E5F97C1396 0833F93E295A44A4 4BD799BB4FAC9903 4DEAC675F85385F0 77ECBFE7A43ADA4C 8EEDB7B2BF5FD578 53DD2FC23E9762AA C95554B22A0B597B 52B29FC0A5053D93 29E7F37649D80146 371FE8676D4E4806 88656CBB5A61F925 96BDF3F4EB4459F9 AA8326F2E9BAE87B 9964D54617526BEB 2820D4642D60BB79 FFE9A2C306998566 DD457B1ACBA9E47C 3367268C00000FE0 7532A4C663B1FBAF ECA1ACB1992A97A6 AE1FE3E344358A5C C0881E178940C64B 3BCDAD48883C80AC 8D34B6F537DB2585 7970E854E77EA3D9 9D43D4CC6C65CDC7 A0B96154B95CC333 3C3BB68F7E215F80 4F608071880EE7CE F090E20B03DA5B05 2CC2A6FD68A62191 B6AF8766BAF25477 EA71DFA5B5BF6CAE 52F6156E109F22C2 A81723B9A51D25C3 47CC511E58B5932A CA04AB57D22339E1 3E91D7A9675FBDFE 5C44F93DDE9CB433 83A1F50714496666 E87901D8832138C8 FBF014A8C0FC8922 4CE53F04B96A571D 716C48F612514A60 7221ED88AA7910A5 3CAE99BBFD5A3C03 3C4BA5B200EF24E1 160677A1BF34EAF7 AC29B3039DD8490D 2181A8E79EE66C65 47C677E6223E7330 E861D0B2A040679A F762C4F7BA1CA69F 1BECC995DC30A37E EEBCDC0005914466 731782FF17EC0493 A14B7E292BD592AF 0BAF081387EFC159 3FFB325C878D7858 09AE36BEF4FC39E0 0FAABBF616594392 1C84EF2D56E79303 6E839E922CC1B6F5 8483FEE7413E1D4A 1AF8ACFBC7A4D512 675E27B4BBDD4F59 7693893C44D97B08 D96EDEDC97472562 B6C4DC63CEF5DABF 5DACFFBA8FF64DBD

Read the ciphertext. Strip whitespace: 1,232 hex characters = 616 bytes = 77 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 19 GUIDs as hex (shown below).

Decrypted: GUID list

  1 bac4be76-e89f-55a7-a92e-595911c77072
  2 91b1b73e-954a-05ea-ac2b-1a14f4d03ed2
  3 2821e357-7269-43c9-89a7-e20a71f695bc
  4 63ef7903-5650-7758-86c8-43b58cfcb2d2
  5 e7ee44b7-75c3-062c-b8e8-230e87681925
  6 cc75585e-5865-03b3-ad30-381af6a2a4f0
  7 2a8260d4-f545-40b0-b5f7-7fc80aaa291e
  8 f105c4f3-1e81-5c2b-84bb-596bd0711c94
  9 bd4b333b-cc59-7501-9aed-c16d973708c0
 10 d890fcce-f88c-3a66-8f7c-04d6184c9b02
 11 d99d6300-1f4d-0fc5-b59a-8f80adfdbcfc
 12 208f9e9f-c81e-2aa6-864b-36522e824979
 13 669812fd-c3d7-687a-b79e-2a27944e7f60
 14 902d3370-fffa-7437-8d93-0ff2c3c74bf3
 15 23952c1a-0298-3b20-9b80-64ea6db42109
 16 c726e2b8-6b3c-48f3-8dc7-08a7a4cdf185
 17 9db46214-ddd3-1e88-9a3c-6f694155ef2d
 18 5d58b742-007a-3f5c-859c-ac331d0209fa
 19 0a208690-c340-5ad0-a38f-de811d3f37af

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5047004573026734135. Exactly this sequence comes out of new Random(662).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 36 of Run 3 (seed 1,063,142,882): new Random(1063142882), Next(8,24) per post. The RNG predicts N = 19; the post has N = 19 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-06-14 10:25–10:26).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related