201206261322 vnb9v

explained decrypted filler

3DES(name) ECB, 14 GUIDs, seed 158

Metadata

Post ID: vnb9v
Title: 201206261322 → 2012-06-26 13:22 on A858's clock
Posted (UTC): 2012-06-26 20:20:32
Timezone: UTC−7 · title 13:22 against posted 20:20 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 912 hex characters · 456 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 14
Filler GUID seed: new Random(158).Next(9) ✓ verified
Run: Run 4 (seed 664,106,302) (seed)
Draw: 6 · predicted N = 14 ✓
Machine boot: F 2012-05-15 19:07–19:12 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 3 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 912 hex characters = 456 bytes = 57 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 14 GUIDs as hex (shown below).

Decrypted: GUID list

  1 fba3b0ad-a524-27ff-bf0b-1ccc568dde5a
  2 15d7121c-ce04-10e0-a07d-5a0db7ccd66b
  3 50eff4d6-072e-1c15-a3eb-7d060f458d74
  4 208cb131-f0fc-2a05-9ee7-9d3b36e9e8a2
  5 34a7d584-eb24-44ea-afe7-c47d733ef7c7
  6 ef5fa242-c58c-5d66-ae66-c6520bf3a655
  7 ad159f84-463a-6aba-af68-2a4b5be6b7c4
  8 7e571b4f-2c3f-6f9c-985a-86468504cc2b
  9 fba5ca19-f725-480e-b0c7-6ed7ead04f91
 10 9622ead6-915a-4f0b-8158-ff7ca58ec91d
 11 a71c5b01-c3b9-6e87-9d29-8e5c1cf306ad
 12 b18426c5-3ca5-78b1-b805-8e647b58e1b2
 13 75c5c6d8-0821-2443-8691-a49c55598927
 14 9d5d2717-e4f3-6174-9e24-0c3c7cbc602d

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 21124566446726. Exactly this sequence comes out of new Random(158).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 6 of Run 4 (seed 664,106,302): new Random(664106302), Next(8,24) per post. The RNG predicts N = 14; the post has N = 14 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 19:07–19:12).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related