201206271713 vpp7k

explained decrypted filler

seed 21

Metadata

Post ID: vpp7k
Title: 201206271713 → 2012-06-27 17:13 on A858's clock
Posted (UTC): 2012-06-28 00:11:40
Timezone: UTC−7 · title 17:13 against posted 00:11 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,360 hex characters · 680 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs: 21
Filler GUID seed: new Random(21).Next(9) ✓ verified
Run: vpao3 (short)
Draw: 5 (assumed: numbered from the first post)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 8 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listkey: namerun: short

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,360 hex characters = 680 bytes = 85 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 21 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5a024cb8-3fa8-6075-86de-72c64b9c7eb0
  2 e7f5810b-ff77-8d23-a99b-552f7157572f
  3 35090472-2bf1-45d4-b428-c946b28a8545
  4 2e4ffbb1-931f-0a50-8ca6-34781c56413d
  5 ebfaaca8-b977-6fa1-b6f5-ac952d8ec918
  6 dfede7db-cbf4-8648-b1b5-d7ca9342f1db
  7 b8b1a651-d8cb-2d84-8c87-24769c824da1
  8 ef5ddb66-b328-8513-8732-eaba0202e085
  9 b37e0e6a-71c4-5fe2-a0eb-d9456bef69c0
 10 24811584-3524-08a0-ab15-9488923723e6
 11 e54d7d88-2f3f-6d9f-a0ff-9d0c539958a0
 12 66b4b34d-f9d7-7c1d-9b3b-09c4d76bce2f
 13 0f864dbb-21a4-082c-8391-0468ef3bef70
 14 d6f2c770-a7b0-3089-b1c5-c904fd03a2ab
 15 2bf39bb2-1ad0-6134-8ee9-ef44932aba34
 16 793cf819-c689-1275-9c52-301a3f44a0f7
 17 b398d756-2eb6-6c5e-b80b-04debdbf2b3c
 18 c568a4d2-c0e0-0f6d-80b4-68f592e3e9a6
 19 3fb8a0b4-5e7a-24c9-8d3f-e2a22a3dfe03
 20 3b9b25e6-b541-478b-aec6-b5791f832c4e
 21 a45211de-8c3e-5c95-8079-f872551e1efd

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 684068285067036160245. Exactly this sequence comes out of new Random(21).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. Grouped in vpao3: 7 posts (40 bits) with no seed under any tested model: not Next(8,64) anywhere in 2^31, not run 8 with a new range, no fresh start on either June boot, N not from the GUID-list seed
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related