How securely unguessable are GUIDs?

前端 未结 4 1757
情歌与酒
情歌与酒 2020-11-29 01:59

A while ago I worked on a web application where users could buy tickets. Due to the way our client\'s processes worked, what you effectively got as a result of your purchase

4条回答
  •  -上瘾入骨i
    2020-11-29 02:20

    GUIDs are generated by a very well known algorithm. There is no randomness built-in as well known values such as network card ID's and timestamps are used to generate them.

    They should never be used as a means of security.

    EDIT

    It appears newer version of the GUID/UUID algorithm no longer use hardware address for parts of their values and instead use pseudo-random numbers. But these are not truly random and still should not be used for security critical applications.

提交回复
热议问题