201206291620 vsb0z

explained decrypted filler

3DES(name) ECB, 22 GUIDs, seed 698

Metadata

Post ID: vsb0z
Title: 201206291620 → 2012-06-29 16:20 on A858's clock
Posted (UTC): 2012-06-29 07:19:09
Timezone: UTC+9 · title 16:20 against posted 07:19 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,424 hex characters · 712 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 22
Filler GUID seed: new Random(698).Next(9) ✓ verified
Run: vsb-burst (short)
Draw
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: namerun: short

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,424 hex characters = 712 bytes = 89 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 22 GUIDs as hex (shown below).

Decrypted: GUID list

  1 41b9387e-1104-374e-8157-c57d1e7f3260
  2 c76fb4d2-87e1-584f-b7a2-b9f08beca7cb
  3 63925666-c389-5ac6-9cb6-51636904bbd4
  4 e4961fdc-0b01-40ff-b610-a31653cdf823
  5 98cd8dca-e60f-3a6d-9ac1-37a8d0d5b1e9
  6 c53a2567-311d-49c1-adfb-69a098456cd3
  7 ff25020d-2a8c-5051-b7b6-f77e5341a4d6
  8 3772259b-4152-50bb-9644-3ee09596f900
  9 d8d2a061-9b3f-277e-b3d7-c3242e027003
 10 4253a5f0-2d97-5518-9bcb-1ca671af3071
 11 072ee869-648d-4cc2-9d1d-b7ca32920e9d
 12 ed94ab3c-1576-30d9-a888-df093ca26a2a
 13 fe8c8d91-c0bf-4e79-abdf-4d0fd4c85eb3
 14 45880a77-49e5-5e8e-b702-7575bd3ac0b7
 15 448bf767-25c2-5cd6-9646-04caf09c2fc4
 16 1c03842f-5e4f-8921-ac88-4cf781bcfc82
 17 2603a7c9-df07-2505-beaf-3f26b626fbfd
 18 23d5682a-e01b-68ce-96d2-d439f2f1f502
 19 8840c048-99db-5932-b715-30796c815a52
 20 bd459f57-fe14-5e71-bca4-9562312a3abb
 21 7dbeb649-91a4-522e-abdc-d4af0c3ad004
 22 5139f8de-9038-09a2-a40f-3a3a21d99453

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3554345525434558265550. Exactly this sequence comes out of new Random(698).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. Grouped in vsb-burst: 3 posts inside the run-9 burst (07:19-07:23) not in its stream; a second instance in the burst, too short
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related