201206261628 vnmyz

explained decrypted filler

3DES(name) ECB, 17 GUIDs, seed 615

Metadata

Post ID: vnmyz
Title: 201206261628 → 2012-06-26 16:28 on A858's clock
Posted (UTC): 2012-06-26 23:26:47
Timezone: UTC−7 · title 16:28 against posted 23:26 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,104 hex characters · 552 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 17
Filler GUID seed: new Random(615).Next(9) ✓ verified
Run: Run 6 (seed 652,173,660) (seed)
Draw: 5 · predicted N = 17 ✓
Machine boot: F 2012-05-15 19:06–19:16 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,104 hex characters = 552 bytes = 69 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 17 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3e526da7-c177-0a67-a836-a8677a574151
  2 82dbf9b0-c70b-2240-9ff6-25947bf5bdc0
  3 c1d5e05c-567f-5fc1-b5df-091618e7e1d0
  4 114dd8d3-0fe5-701b-bc1d-61076f3cf7f4
  5 4a1ab0ea-006a-7ab9-b0b9-00acb1932391
  6 1da003df-ed09-034c-8376-e83880033465
  7 950f3f44-c345-45db-ac8a-d56d8e1db535
  8 876acccb-985c-8ceb-b2eb-6130dff3a295
  9 9ca39254-d9b6-0a97-86ec-235eb5be04b3
 10 976079a3-0ca0-0f90-bc8c-87f013daeba2
 11 d515a6d7-3d64-310f-bec4-48b60d1b2a1e
 12 6c4100e5-46d3-516f-9843-ec70aebb480a
 13 61ae73a2-73b5-3da0-a340-2947bfa0f457
 14 4db43892-1821-327b-974f-ac17916d3a96
 15 47cc55db-cc7f-4cb6-af00-7b867db49b97
 16 a1f0eedd-0a89-0fc5-9e00-4137e5991538
 17 3fc663b7-60d4-37dd-9906-176ac384a8e2

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 02577048003533403. Exactly this sequence comes out of new Random(615).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 5 of Run 6 (seed 652,173,660): new Random(652173660), Next(8,24) per post. The RNG predicts N = 17; the post has N = 17 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 19:06–19:16).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related