201206270526 vnfl1

explained decrypted filler

3DES(name) ECB, 17 GUIDs, seed 432

Metadata

Post ID: vnfl1
Title: 201206270526 → 2012-06-27 05:26 on A858's clock
Posted (UTC): 2012-06-26 21:24:28
Timezone: UTC+8 · title 05:26 against posted 21:24 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,104 hex characters · 552 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 17
Filler GUID seed: new Random(432).Next(9) ✓ verified
Run: Run 5 (seed 659,062,118) (seed)
Draw: 8 · predicted N = 17 ✓
Machine boot: F 2012-05-15 19:11–19:13 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

5B0BE6AA483B2D57 63A8DA52B88336EC E3145F59DBE4A8A0 C49A85EB3F0969FF 01FA249AD6C9B2C9 FC03BEBA43C34B51 86E4A55308A392A9 F7C9E240BE864A95 839B556D8A72728B A18C4AFC14FD750C 5DAF44427C4A46BF 7B4F0D690AD4F3B2 1366AFE319FE89E6 4B0A4C9281341807 5E8D8780EB369D3E D5669524104B56B5 F3D50ED65B930618 22E1C199BA09FD5A EBBDB00D75EC299F 0DF3B28059697630 60A8B5A5458EF5F8 6A8549109B10C0AC 834ADCCCDAF101B7 D0B1A30CB1EF1F09 93BCC565FAD934D2 BFD11EF60F1D258C 3774C03E283E7847 2F9F684E90DBCE35 C227E83C82C84C20 54AFCFEC7ABA5454 EFBF0EA8B8354A8B 6B73C4CE370ECAB5 C4AE3FB487B55EF0 F0C94F88D9B24805 FD7D905AB343215D 3094D0B2CF5CE662 A7DF15A9B355549C E6D564D9AA8DF0AD 4CD34FBE7B5E530F 999AD6225CC2A880 A0694467A743B527 F259407147F295E1 0F7F8E722421E0D0 A6900D202C429598 013E2F0E8B2CA0C6 F601B36A2FCC2988 2D14763FA71EC279 6E17BFB032427985 1ABCBEDCB84593B2 249CBEBA473EE020 8B32A2A69F38E222 C85037DAACEC2633 CF747D0F44D8E316 8109989B8B44BD66 0DAD759C08560FB0 5892ED8615EBF73E 3859BEE0FA055159 B43F4ABF6F0984C1 AD9CCBAAD13C4241 0C49EA17A8A16C01 3FEFC25EFF268221 95C110E762EC19DF 789F567323757FEB EC2B0555432B74B5 E58E4EC941DDFB3B FB6D695943198881 FBEFF0C9B80E8302 88838FC37E122DFB 5DACFFBA8FF64DBD

Read the ciphertext. Strip whitespace: 1,104 hex characters = 552 bytes = 69 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 17 GUIDs as hex (shown below).

Decrypted: GUID list

  1 2b8be107-f0bd-3d4b-a030-f651c9779f59
  2 34cf2f13-8c08-5146-8443-bcbe9cc0da35
  3 8ba985a6-b948-68e1-9b00-04412ef7ad1c
  4 62fe81a4-9eb9-6319-b2fb-530f1b62421f
  5 ae7fcc26-e47d-225d-a5d3-2971c149b59f
  6 9d11f1c7-7ab5-0575-a1eb-6047b850e52c
  7 8c65be22-2c44-4b84-84e8-b31bf617d061
  8 e4863970-3c2f-1338-981f-a7f925e856c8
  9 1ff7017f-8f41-36fc-bd19-a6cbca480af9
 10 cd8dd674-74d9-50c1-ac72-737e5228046e
 11 000cad9b-dfae-5b44-96f7-44be9a14f089
 12 cf7dbacc-df9d-673b-8176-e0ea21201c6a
 13 b9028b86-9d7c-576e-ae06-4dee64c8afdd
 14 16b6bf47-5243-1723-b0a9-ad59bd639c4c
 15 dc2d14a0-a9a6-3e07-a07c-b9194cbbfebf
 16 ce0e98b2-763e-7294-ac8a-d53e56518da5
 17 0399eb9d-e0cc-4d56-8fff-007167a19bee

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 35662041355651374. Exactly this sequence comes out of new Random(432).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 8 of Run 5 (seed 659,062,118): new Random(659062118), Next(8,24) per post. The RNG predicts N = 17; the post has N = 17 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 19:11–19:13).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related