201206272056 voivd

explained decrypted filler

3DES(name) ECB, 22 GUIDs, seed 522

Metadata

Post ID: voivd
Title: 201206272056 → 2012-06-27 20:56 on A858's clock
Posted (UTC): 2012-06-27 11:54:26
Timezone: UTC+9 · title 20:56 against posted 11:54 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,424 hex characters · 712 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 22
Filler GUID seed: new Random(522).Next(9) ✓ verified
Run: Run 7 (seed 629,367,141) (seed)
Draw: 17 · predicted N = 22 ✓
Machine boot: F 2012-05-15 18:57–19:13 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,424 hex characters = 712 bytes = 89 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 22 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0aaed6ad-0af5-3324-91e7-aa51fdcf2387
  2 579db0b7-3931-8bf9-95ca-b9439ecc8cc9
  3 65925403-0ba6-5e56-b127-c922f216b5ea
  4 e10eb550-a79f-8924-b231-9ca2363363f6
  5 bd58cfee-ae1d-70b3-8294-5a90ca4cfccf
  6 a6181a3b-cbc4-683b-b874-f25d5f358192
  7 3a8c109f-1157-768e-b1db-19593b466633
  8 9aa61ac8-4fcf-2f78-831c-bb1da5ece7d1
  9 97ff032e-6232-50bb-b27d-ab5626ffc82c
 10 1b8f2949-7c8a-6154-a0fe-a2bea1222294
 11 f83b0012-c9f5-7da2-b73b-77e1c9dcc0bd
 12 3d664b90-9e64-09f1-88b6-12f59bb46ecd
 13 3648b774-261e-4830-a624-e9ab78b583e3
 14 0fba4226-2782-0c30-a422-9a44669ac670
 15 bab78580-0b3b-3cf6-88f5-e0bd3dfd7c9c
 16 90ce0d6f-7e8a-046c-91ba-ad885a4663c2
 17 3f935e5e-bfef-2b92-95d8-c69630693039
 18 9a246c86-38a6-5274-a400-2478cde2dbb4
 19 ddd83620-c31e-7899-b0a7-9dbd20b85886
 20 08dda2d9-b0ab-3c60-af12-a5ade8c7518f
 21 dbf8b3c3-4388-1641-a0c3-446f901c69a8
 22 aad8a01b-bb55-8354-8c88-bd3d6cb8483d

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3858767256704030257318. Exactly this sequence comes out of new Random(522).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 17 of Run 7 (seed 629,367,141): new Random(629367141), Next(8,24) per post. The RNG predicts N = 22; the post has N = 22 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 18:57–19:13).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related