201206261327 vnbnl

explained decrypted filler

3DES(name) ECB, 23 GUIDs, seed 454

Metadata

Post ID: vnbnl
Title: 201206261327 → 2012-06-26 13:27 on A858's clock
Posted (UTC): 2012-06-26 20:26:06
Timezone: UTC−7 · title 13:27 against posted 20:26 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,488 hex characters · 744 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 23
Filler GUID seed: new Random(454).Next(9) ✓ verified
Run: Run 4 (seed 664,106,302) (seed)
Draw: 7 · predicted N = 23 ✓
Machine boot: F 2012-05-15 19:07–19:12 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 3 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,488 hex characters = 744 bytes = 93 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 23 GUIDs as hex (shown below).

Decrypted: GUID list

  1 1d92abe4-04ba-82b6-bc9d-eb8acd7333d3
  2 df70a138-7a59-01e4-bcca-f7191144150e
  3 264d1e4d-e46c-0f27-8df5-8658d228647f
  4 afeb011d-a8a3-4b61-8b14-40347b371829
  5 b5c715c6-a25f-1633-8bc6-6228ac39f8d0
  6 bf90fbb6-0cfe-21ff-8087-68adffe743a7
  7 008b00c1-816e-2f66-bbe5-9ebf20b7ed1f
  8 ce4de82d-d148-1a9b-9371-28066d886127
  9 09b8e60f-6792-1e90-9f20-b126afa9eba4
 10 2255e7c9-4738-6801-8ee2-6c6826922845
 11 41ba806d-7444-653f-a486-06a1616e7930
 12 b571676f-211b-8e3e-8c93-18a0129886e1
 13 c621ed54-db57-6f37-a6b0-cc106c676238
 14 31e20730-baec-5264-a316-6415018c8eca
 15 589447ee-7503-6c2a-ae6b-42d5dd95f030
 16 707876aa-789e-5496-805b-8c1526837cb7
 17 872b3a50-1061-6387-baf6-3c3fad4e1152
 18 36993a2c-03e8-4990-b13e-979f0fa8c739
 19 291eddff-623b-8f9f-bbfa-4afadba32ca5
 20 0c44148a-1359-00be-b180-156d680c8e4a
 21 45de82a7-4cbd-1233-a30a-c8efec20971f
 22 533bc4ca-923c-2699-9f9f-793e460c78e9
 23 88f6c601-8270-6b94-8352-62b36b08a2db

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 80041221166865656480126. Exactly this sequence comes out of new Random(454).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 7 of Run 4 (seed 664,106,302): new Random(664106302), Next(8,24) per post. The RNG predicts N = 23; the post has N = 23 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 19:07–19:12).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related