201206270602 vnhvv

explained decrypted filler

3DES(name) ECB, 18 GUIDs, seed 894

Metadata

Post ID: vnhvv
Title: 201206270602 → 2012-06-27 06:02 on A858's clock
Posted (UTC): 2012-06-26 22:00:57
Timezone: UTC+8 · title 06:02 against posted 22:00 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,168 hex characters · 584 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 18
Filler GUID seed: new Random(894).Next(9) ✓ verified
Run: Run 5 (seed 659,062,118) (seed)
Draw: 15 · predicted N = 18 ✓
Machine boot: F 2012-05-15 19:11–19:13 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,168 hex characters = 584 bytes = 73 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 18 GUIDs as hex (shown below).

Decrypted: GUID list

  1 6f92fc22-33ba-6a06-9f0f-1745b8a8e685
  2 98f9b552-16fd-10e7-81a3-cd58ae28081f
  3 81100c14-c2bc-5a45-b460-cc8ecfb62156
  4 9494f165-204e-35b4-90a4-6dff322eafb1
  5 0ef92b58-b92c-7e1e-bc18-91671c0fbc80
  6 a425d12a-c9bb-774f-a0a1-75ebb77ae452
  7 805a6879-5e35-43bb-b573-df5b157274c7
  8 a1a80b4b-3cbc-8cfa-8b12-37c70602ee1e
  9 09767725-9d24-512a-b215-01bfce14ba77
 10 60f1252c-181a-8322-9763-d4df20a4fdd3
 11 6be5f782-56f9-8777-bb56-5fd03dd292b3
 12 cdf6aea9-35d9-3307-8521-2285086bb789
 13 a70dd555-9beb-15e9-a49d-f25a19ed3750
 14 fcd5f053-cc51-5656-87ea-cefd1fce482b
 15 625eb579-468c-6434-bd1e-c05722680825
 16 01968c8c-10f8-3570-a66f-fbf64cf2c322
 17 fd08203f-f58d-5a83-abab-d766be909172
 18 57915dc3-7561-2751-9eb9-289c7b5915b2

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 615377485883156352. Exactly this sequence comes out of new Random(894).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 15 of Run 5 (seed 659,062,118): new Random(659062118), Next(8,24) per post. The RNG predicts N = 18; the post has N = 18 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 19:11–19:13).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related