201206261140 vn4kw

explained decrypted filler

3DES(name) ECB, 19 GUIDs, seed 434

Metadata

Post ID: vn4kw
Title: 201206261140 → 2012-06-26 11:40 on A858's clock
Posted (UTC): 2012-06-26 18:39:03
Timezone: UTC−7 · title 11:40 against posted 18:39 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,232 hex characters · 616 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 19
Filler GUID seed: new Random(434).Next(9) ✓ verified
Run: Run 3 (seed 1,063,142,882) (seed)
Draw: 48 · predicted N = 19 ✓
Machine boot: 2012-06-14 10:25–10:26 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

847AA4B135E1F1AB 163D6EB2EAD7EDA5 6955D428F2F3F84A 06BF7DD3D6A1EFEE 34D3DD45B784FECB 9A058368D42C64F4 B91606DD05BA850E 48467C2115104BFC A4EC6FD9E89297C7 B2364296FF67CB22 4637D0D371675A1C BF1D0AC34BFD7B2C 18E2F77BF6C3230E 2C4B0CDD1603E3C6 EF3582404ED03C63 5B6DE0BB08497FF1 7F4879BCE4CA4248 1930C543D456B66F 712C8E9BB1A95225 4C2B55BAB3BD0671 7A9D337232D922F7 C6527DEB530EE4B8 EB21950B04883CB9 0767DCAF3461F9D6 3151447037E30130 E2D162CD441794D2 A2BB796CF61AECCF BD0A8AC539CF26E1 9CC38F6587ECC136 F63FAA146CDEE724 97F5432744949773 0E330106CBE1204D 4C785EE1911A8159 D4C5D3BE50EC435B 87367852543B3999 DD90E3F95EEBEA93 9E7B98346CA32641 39ADF7768B431062 F89F35FAF2E2B2CE 6EA11FEC1AA8CFE4 1A752FFFF57E75E5 103F72411B751DB2 BBF1C3FF192743ED 8647DCADA156DA1D 011E642BDDEE5E48 A8BF7BF20221BE85 70C0F56258B924DE DC411D041F606D7F 8F0AAC4030D6284E 1EBE8D50AB1F8D73 67FC2DC0860F4497 47281DB371E5AFB0 1E46D84BF0DFF5A5 E458882BCA64DCC0 6746913ECBA16D88 22BE1AFC9BA5E97B 7E1413161C45D543 B2BA69BEC6C7AC1A 168AC04CC48507AE D8D0B35F978D8865 E090EFEDDECF4377 D54704CB25E4B740 FC68129DA328E6B0 6F00F3B4E49180E0 4CE6439451F54453 1B22FF88E31FDB42 CD919258D653FCEC D797CE3B010211C3 34F69AD1FF609147 D154D6FBF0086DD1 CF45F7AFE9EDA441 44838151DAD83B58 FF6F8874DD03F822 C0D0BE256F6F1488 5FD8D69E016F8B19 68B8528893765AB4 5DACFFBA8FF64DBD

Read the ciphertext. Strip whitespace: 1,232 hex characters = 616 bytes = 77 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 19 GUIDs as hex (shown below).

Decrypted: GUID list

  1 7513669a-0cda-400f-9d41-202f991f5d8b
  2 648a39c4-9123-18c4-9a03-3f73cdf0affe
  3 73dadb33-138a-1b79-9741-3baf12ff23c0
  4 d8dac49a-2dbd-1b60-b3fc-71d6554c17b3
  5 8e105f66-be8f-1017-b90e-7d625c52ec76
  6 c9fcd87b-d7e8-7894-850f-943a298c34d0
  7 b553d85a-cbe6-3b71-9cc5-59af46e8d6ac
  8 35470757-9d4e-1442-a60a-9566c46f76bc
  9 e9964305-385c-6851-9d9f-4837da961bb5
 10 2d6df712-4ca8-2284-bde0-1edc57085146
 11 87304a6b-35b4-0bb9-b03b-507af90ca141
 12 a1cd9ac0-a3bb-2817-805d-1561a79775a2
 13 695ce670-69b9-8d6a-a410-5f22e53b3fb8
 14 6ecb6eb7-63ee-2609-9874-15e1bb948b75
 15 ac8d9406-ac78-6f03-98d2-61fe38aec6cf
 16 28456b86-8967-0849-9fda-6df6047bed61
 17 41100b7a-c3dc-2b28-9d5d-c7afb33852ed
 18 ddfd120d-47e3-033d-8659-5eea0bff29f2
 19 2b2dbd4a-e595-35a4-a7e3-35a017320ca0

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4111173162028260203. Exactly this sequence comes out of new Random(434).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 48 of Run 3 (seed 1,063,142,882): new Random(1063142882), Next(8,24) per post. The RNG predicts N = 19; the post has N = 19 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-06-14 10:25–10:26).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related