201206271226 vo3tw

explained decrypted filler

seed 335

Metadata

Post ID: vo3tw
Title: 201206271226 → 2012-06-27 12:26 on A858's clock
Posted (UTC): 2012-06-27 04:24:19
Timezone: UTC+8 · title 12:26 against posted 04:24 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,296 hex characters · 648 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs: 20
Filler GUID seed: new Random(335).Next(9) ✓ verified
Run: Run 6 (seed 652,173,660) (seed)
Draw: 36 · predicted N = 20 ✓
Machine boot: F 2012-05-15 19:06–19:16 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,296 hex characters = 648 bytes = 81 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 20 GUIDs as hex (shown below).

Decrypted: GUID list

  1 87931936-4a92-6069-ae6b-3122431f5d0c
  2 e50ee1f3-9df0-132e-bd95-2f61d54224e2
  3 5d9fc9f4-2261-86d8-b899-f323d1013b46
  4 3b5bb9f9-44c7-0fdb-bf39-2ce53278c21f
  5 0e2fd773-58f2-4f2f-ae28-6e1666bde408
  6 07ba5626-9bd4-2a14-90a0-5cd7e9c46c51
  7 a905fe4d-1af4-04e0-bc37-b2a4ae1c09cf
  8 e6df4d41-e3c8-46b2-81a0-518a1ce06b5c
  9 9032eaee-8524-317f-8f96-1e4a7647042c
 10 ea614c52-9194-77ab-ad84-f7dcbffff283
 11 8398c7de-8f54-0a8e-b521-abe6da76c4e7
 12 0c80c3cc-e44e-0070-bd8a-0474152f7f4c
 13 9ab51d02-b4f6-88c7-8ba6-2a671fca8d2a
 14 25b6f4f0-6cdd-6c68-8deb-4ac5718c5b0b
 15 03dcc2bc-1a00-40f8-868b-43129f7c3183
 16 5eb2613a-aff9-2257-86b6-704609e5f342
 17 9c8b9020-35da-6f18-abf3-7855d469c9fd
 18 2fd66ef5-a308-635c-ad45-b755725f2efb
 19 678b55f1-306e-6611-a3ad-1a603d722016
 20 25a1a549-3d59-0677-9cb2-bdcd3e558499

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 61804204370086426660. Exactly this sequence comes out of new Random(335).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 36 of Run 6 (seed 652,173,660): new Random(652173660), Next(8,24) per post. The RNG predicts N = 20; the post has N = 20 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 19:06–19:16).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related