201206270632 vnjql

explained decrypted filler

3DES(name) ECB, 21 GUIDs, seed 908

Metadata

Post ID: vnjql
Title: 201206270632 → 2012-06-27 06:32 on A858's clock
Posted (UTC): 2012-06-26 22:31:02
Timezone: UTC+8 · title 06:32 against posted 22:31 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,360 hex characters · 680 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 21
Filler GUID seed: new Random(908).Next(9) ✓ verified
Run: Run 5 (seed 659,062,118) (seed)
Draw: 18 · predicted N = 21 ✓
Machine boot: F 2012-05-15 19:11–19:13 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

0BBEEA09BAE2CC49 56E5D9DFC0B20EE7 1F74432BA4B0C08A CC5C8E547894F438 E849B7FB9DCC054F C199338F7F8D46F2 B820C381285F532A 5A0B0ACA622D3E15 05ACEC942E8B4E76 21569CCA9C2ACF38 4EB6188C1F15E296 FC4FFBDEB5E84430 0A8409F37493AA60 D5BD38A1F9900BDA E9A988509FF7BEE5 32A1503A5498893C 8869307A6959EB21 2434C8F6883DC8E1 3BB468979E599CA7 AE9FD2D33B2322D6 E7145084ECFA0D8F F2F1DF709445CCA9 DFE00FC1FBB9D2F1 598ABD1F870A3DF4 62062014F7533AE3 19AEF82B625A32A7 9DD7F36FFA465588 5A3F06D493887158 21325846DEA1FA69 239851DFEC093F6A A46F59FCC797BC22 EDC83F156C919329 D1E9FA44D2FA6F1D CDA1850D3A18A677 18E58035500016CA BC86AC14F7186C4A E8A2F46B09567E1C 08C36CF50E5B0F91 C13324F35EF03BB6 4E9680025A7D1B84 00F82133019AD491 59DE51D2968DF9CD ACB6A7AF4101907A 4D30E0F280739D48 2ACBC247E53B5A5B DE22FA03C363B381 DCF64CF1BC365789 1942D00BB3D30A4C A99E48A2821465F4 12EEEC3DA586430E 79A785D9CC137074 DFE028192CE4D001 F0AF702207ED1EA5 D932D2C7B480F32A CC11F3DF0B2987A0 B64627A64E9D989A F9A95389A8994DF7 31D1D65C74784951 3EED83E6DCA9904F 0A7A3B15F39797D9 28F9660EDA907879 1F381ECAB5E7F6BF B0C59476B6B4DF14 304FA6197088AD54 BDA730F1121C2E89 1A4CD5986142131D 8AD43AA2B0D16BA2 1A1CC46AF1873DAA 2828DADEEACD0335 0BDD8D8706D16466 F0EB784057253399 3C6A405962EC095B 7266BF1A1D220022 012AA31F8888673C D6467F696A97C25D 429806A806A3B825 0A99D5ED001DC90F A13B2EEDF4242157 32D65271873EEBC1 B279C6E7D9742172 71F024D123916114 A2E2766A3C3FF757 AB3116614F6F4B2C 1EAF709A48A98F04 5DACFFBA8FF64DBD

Read the ciphertext. Strip whitespace: 1,360 hex characters = 680 bytes = 85 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 21 GUIDs as hex (shown below).

Decrypted: GUID list

  1 1276ee97-d10d-009e-a995-6a3bb31c2b71
  2 9fd8683c-da58-20fa-bc1f-6ecca2104604
  3 4bc853e7-fa62-469e-bb8a-f81b8aae5087
  4 05ecdfb2-8785-3515-844e-d59c3b07d82a
  5 20dadf2e-95d0-12c8-ad6e-d742bae44054
  6 b6737ddf-3b67-0479-b54b-320dd00f1ad5
  7 1093c9c8-9c18-6401-9cde-b3387abdb189
  8 d0d94543-8268-89ad-8acc-239f1e61e33b
  9 6752cb26-b7e9-2045-af2e-6ea803a00f4e
 10 2317b151-cdb9-0b14-a91c-4ae3b19b338c
 11 8506e552-29d7-20e0-9e90-bb2984d2ee02
 12 ec68fc80-0582-3a4d-babb-5f52cda3b9ad
 13 5adc86a2-90ff-789a-8289-b9816598117c
 14 cb2dface-acac-712d-9d3d-3f559c010cbc
 15 bc33c314-e0e5-50d7-b970-f26596d62738
 16 07ff0408-ea31-0239-b234-49ce555502ca
 17 d4b1f7fd-c20b-4275-bb42-cc58c880003b
 18 c70cab81-0bcc-8550-acac-d2001ef39fa1
 19 78fb1f4e-010a-268c-8eb8-084dba26d620
 20 976abb46-83fa-8a4e-83c0-5ba339d29d1a
 21 86fc3c3f-fc31-4488-893b-d156d89ea2d1

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 024310682023775048284. Exactly this sequence comes out of new Random(908).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 18 of Run 5 (seed 659,062,118): new Random(659062118), Next(8,24) per post. The RNG predicts N = 21; the post has N = 21 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 19:11–19:13).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related