201206271128 voshn

explained decrypted filler

seed 591

Metadata

Post ID: voshn
Title: 201206271128 → 2012-06-27 11:28 on A858's clock
Posted (UTC): 2012-06-27 15:27:13
Timezone: UTC−4 · title 11:28 against posted 15:27 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,424 hex characters · 712 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs: 22
Filler GUID seed: new Random(591).Next(9) ✓ verified
Run: Run 8 (seed 593,707,075) (seed)
Draw: 0 · predicted N = 22 ✓
Machine boot: F 2012-05-15 18:59–19:19 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,424 hex characters = 712 bytes = 89 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 22 GUIDs as hex (shown below).

Decrypted: GUID list

  1 1b576baa-e922-473d-b36a-4111a9ddc3f2
  2 572d0d7e-77b6-21f6-b9d1-4ec039efc58b
  3 bed29772-56f8-7dbe-9efe-8c00a6b6eb4e
  4 f3fe3abe-4f73-6d21-96fc-a42d0b6d18f0
  5 770408c4-0992-0f35-b574-0f9735bb1422
  6 40267282-70f2-0afb-80a2-2e5b9b0c8313
  7 efb7feac-7c4b-64e1-a805-55a07f8efb31
  8 e60e5f86-2873-8c44-9a6c-32cedbe4d559
  9 9e7c2201-72a5-011d-b3ce-91d498a92ef0
 10 528a93b4-677e-13be-872c-7ea4d9143785
 11 aec6ff29-6c37-6ae6-ac68-fefed053d916
 12 abe2a23c-7fb4-72ed-bb75-378ea1eb0d21
 13 67fde529-e5ff-8db7-be00-e4f6f3e84e34
 14 e9e0acd7-4c25-8bf7-ab2a-00888855d553
 15 4360caf4-b290-53db-bf06-95bb3e8677b1
 16 f57e9c7c-ead3-1ce6-afde-d96f3550667c
 17 b1cf0f36-6794-2ee8-95da-01eabae03271
 18 d5b5c3a6-b46c-39ea-b854-7d13305b3085
 19 9435c07d-4b67-6068-874f-2700908cfc38
 20 e371f3cc-f9ec-11f1-bc78-80c3a8fbb35c
 21 8534381c-d6dd-32f8-bbf7-280ff1b162e9
 22 cdb1d8f1-f08c-7f7d-84c6-51ace5f9f48a

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4276006801678851236137. Exactly this sequence comes out of new Random(591).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 0 of Run 8 (seed 593,707,075): new Random(593707075), Next(8,24) per post. The RNG predicts N = 22; the post has N = 22 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 18:59–19:19).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related