201206261614 vnm6k

explained decrypted filler

3DES(name) ECB, 17 GUIDs, seed 590

Metadata

Post ID: vnm6k
Title: 201206261614 → 2012-06-26 16:14 on A858's clock
Posted (UTC): 2012-06-26 23:13:03
Timezone: UTC−7 · title 16:14 against posted 23:13 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,104 hex characters · 552 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 17
Filler GUID seed: new Random(590).Next(9) ✓ verified
Run: Run 6 (seed 652,173,660) (seed)
Draw: 1 · predicted N = 17 ✓
Machine boot: F 2012-05-15 19:06–19:16 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

B524DAE774D7E4A5 FEE64B856B1DB52B B0F94E66162BD740 EA4D2F16C4E72881 D44566FF0D37D373 A63DED7D24C19AAF 7C2B653335069C1F 4D93A7579C177E7D 2A3CF82222247604 36E95B92D59E3494 E44998D49DBBB19F 3823D54C1CBBDB14 8A593A803CF8FBFC 19BC09BB22683CA8 2ADFB1AD99F2A632 2A82880618193956 32B75E5A2F9DC2B9 0E3E9EAD1E011974 A4FDCD74EBB99970 3B5C301BDF0EA4C6 03B501AB3123B506 56C7385DEBACDCE3 333D97C0137C263B CD87823E90C0CF6E 1CEC59DA53084169 73664D4D4A55147D CE2E3090AB64B146 7BAEAE16DDA845BB DC26396BABA95748 3AC3B3B3E8041D3A 96B15E0131C896C7 B995EB665ED07893 7A798711996C911A 2CA66C1930595614 67BAEDB2F21D9AFB 3698ED4E1A2068C6 C64935E43A714786 1E08C20AE35BCEEF 3C23ECD7AB6593FD 3AA9B38558A9F4E5 532434FAF03C9B48 7E8F79C4590BFFBC D3D2E72DF5B62DDF A0BD026839047AC6 27160630F18EFF93 3B8530BF15D41591 71A1BAF10A755E02 1940C78692EB5A3B 84F1314F1F934919 31D1E00910B332A1 5BD3ECF84E8B8EB3 96A31B26DF03AD19 E2541D93D1B316E1 24C9F51A062F5FAC 5F51489F9BDF935D 6019EA3EC0B227E7 75F3D019B15ED7C4 FBE1F872687B7A20 A9FD90AE20A5E151 5848A4BDC0D4829C C03E8FA95DE2D6B7 1DB3B61816487839 167E27B36ABCF975 F94EDDF70AF09568 CD878EE1953E3D6E 11A52A44FDAAE34B FD3A255E16E61233 762A2E0341C6A0CF 5DACFFBA8FF64DBD

Read the ciphertext. Strip whitespace: 1,104 hex characters = 552 bytes = 69 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 17 GUIDs as hex (shown below).

Decrypted: GUID list

  1 98f2c90d-0d45-8898-be13-597b0f1af006
  2 a15b0beb-22cc-87bc-9e58-8cc5253f5fb5
  3 d6036003-ff6f-18a7-94df-70fa1b07357c
  4 613ed4dc-82d6-4078-aaff-5631d71ea4bc
  5 3873d4ca-6757-5020-b247-30dc50a6fab4
  6 e67b9e45-76e8-1bcf-902d-927e12efbd43
  7 42a2785d-5bf1-23ca-86a1-4778475a0e15
  8 8b74b924-59a8-38a4-a53d-91cdc7e509ab
  9 c3b21720-811a-8aee-bc03-092ccf39b078
 10 89ba7259-bef1-72be-8441-9d1b8bf14aca
 11 1df4ee84-2139-86b4-98e1-156c50434056
 12 15500594-4753-0cc9-87f1-172bdf7a5560
 13 94a9cc16-6cde-27e3-981f-f885ebec011a
 14 2ed9e8fd-cb59-3047-b1d7-1c5f9b52f32e
 15 75036f88-bf6b-83ae-99bf-93f4977eaf25
 16 f4b76138-2d71-4023-8d98-24c83378229e
 17 8e172b5c-6703-74af-8b68-dc773b026793

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 88145123878023847. Exactly this sequence comes out of new Random(590).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 1 of Run 6 (seed 652,173,660): new Random(652173660), Next(8,24) per post. The RNG predicts N = 17; the post has N = 17 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 19:06–19:16).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related