201206261141 vn4o4

explained decrypted filler

3DES(name) ECB, 21 GUIDs, seed 473

Metadata

Post ID: vn4o4
Title: 201206261141 → 2012-06-26 11:41 on A858's clock
Posted (UTC): 2012-06-26 18:40:09
Timezone: UTC−7 · title 11:41 against posted 18:40 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,360 hex characters · 680 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 21
Filler GUID seed: new Random(473).Next(9) ✓ verified
Run: Run 3 (seed 1,063,142,882) (seed)
Draw: 59 · predicted N = 21 ✓
Machine boot: 2012-06-14 10:25–10:26 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,360 hex characters = 680 bytes = 85 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 21 GUIDs as hex (shown below).

Decrypted: GUID list

  1 94d3a509-7f9d-7b8f-932a-d425104278d2
  2 0887d9df-a0f6-5d44-a026-8a8eb039f99c
  3 cfa5b71c-057c-3294-a476-109404b1ce67
  4 2ad6f58b-8178-41ef-8aee-56fe4f45a985
  5 6d2f817c-b392-6bfc-ab18-68cae6ddbb0a
  6 717190b2-c709-86be-bd32-70db7974369b
  7 77fb45f7-b72a-79e2-8e2b-46015500edc5
  8 561ed4ae-6faf-6a5c-a6f5-37a42d6b4cb1
  9 95b9f7af-4a33-47d3-b9e9-76cf00c906a9
 10 3a305c8c-0a28-6979-9613-07fd03a6931e
 11 6b777e63-8db9-6732-b9ef-e713839fb8eb
 12 9e78f1f3-90e7-6255-ba94-e468ddc689ee
 13 61fb6be1-5491-729a-ab24-03dbceb95b2f
 14 968a2257-9cea-4ded-be69-77768f6b9838
 15 8189c6cb-05a0-0590-9a43-9514522add5d
 16 3d216941-f4d6-3228-a1cb-c889e602c1e4
 17 60c8a390-2005-6c23-9c1d-fae403d20acd
 18 1990ba64-9b6e-2d7d-ba61-4aa6563b503d
 19 fbf8e02c-c71b-4ad9-925f-ec852ef0a249
 20 3c1244d6-a6ba-4c31-aacd-c98dd2a09bf2
 21 366b8e6c-7a4f-5cc0-a34c-8d4f05dd1e1e

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 753468764666740362445. Exactly this sequence comes out of new Random(473).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 59 of Run 3 (seed 1,063,142,882): new Random(1063142882), Next(8,24) per post. The RNG predicts N = 21; the post has N = 21 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-06-14 10:25–10:26).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related