UUID Algorithm?

Bob_Zimmerman — Fri, 18 Apr 2025 17:12:19 GMT

It was recently pointed out to me that we have somewhere around 45k unused objects across our firewall managements. I've been identifying and deleting them, but in doing so, I found some runs of UUIDs which are similar enough I'm concerned about the randomness of UUID generation on the management servers. These are all from admin-created objects, not default objects from Check Point:

"6c3e5ac6-59c8-11de-912d-00000000c0c0" "6c5bc390-59c8-11de-912d-00000000c0c0" "6889d7e8-59c8-11de-912d-00000000c0c0" "68ec706a-59c8-11de-912d-00000000c0c0" "690982fe-59c8-11de-912d-00000000c0c0" "6c763b80-59c8-11de-912d-00000000c0c0" "692295c8-59c8-11de-912d-00000000c0c0" "6942f714-59c8-11de-912d-00000000c0c0" "69649c2a-59c8-11de-912d-00000000c0c0" "69a7cc2a-59c8-11de-912d-00000000c0c0" "6ba21350-59c8-11de-912d-00000000c0c0" "6bbe93ae-59c8-11de-912d-00000000c0c0" "6bdd0d8e-59c8-11de-912d-00000000c0c0" "6bfd7da8-59c8-11de-912d-00000000c0c0" "6c180aec-59c8-11de-912d-00000000c0c0" "69caa2d6-59c8-11de-912d-00000000c0c0" "69e8f736-59c8-11de-912d-00000000c0c0" "6a0741be-59c8-11de-912d-00000000c0c0" "6a2420fe-59c8-11de-912d-00000000c0c0" "6a8313ca-59c8-11de-912d-00000000c0c0" "6ac712dc-59c8-11de-912d-00000000c0c0" "6ae6909e-59c8-11de-912d-00000000c0c0" "6b05d8be-59c8-11de-912d-00000000c0c0" "6b27d2b6-59c8-11de-912d-00000000c0c0" "6b468c6a-59c8-11de-912d-00000000c0c0" "6b801124-59c8-11de-912d-00000000c0c0" "5f6799aa-a1c6-11e0-b514-000000004c4c" "5ffbf104-a1c6-11e0-b514-000000004c4c" "605d6c7c-a1c6-11e0-b514-000000004c4c" "610321bc-a1c6-11e0-b514-000000004c4c" "619589d0-a1c6-11e0-b514-000000004c4c" "61eb2778-a1c6-11e0-b514-000000004c4c" "62b58824-a1c6-11e0-b514-000000004c4c" "636742f8-a1c6-11e0-b514-000000004c4c" "64134f9e-a1c6-11e0-b514-000000004c4c" "64961870-a1c6-11e0-b514-000000004c4c" "6502de2e-a1c6-11e0-b514-000000004c4c" "65b646d0-a1c6-11e0-b514-000000004c4c" "664c63f4-a1c6-11e0-b514-000000004c4c" "66ad25ea-a1c6-11e0-b514-000000004c4c" "67650e62-a1c6-11e0-b514-000000004c4c" "67dda958-a1c6-11e0-b514-000000004c4c" "6841db94-a1c6-11e0-b514-000000004c4c" "68f1b686-a1c6-11e0-b514-000000004c4c" "6971bb10-a1c6-11e0-b514-000000004c4c" "69dd44b6-a1c6-11e0-b514-000000004c4c" "6a8d27fa-a1c6-11e0-b514-000000004c4c" "6b1f0530-a1c6-11e0-b514-000000004c4c" "6b9209e0-a1c6-11e0-b514-000000004c4c" "6c47550c-a1c6-11e0-b514-000000004c4c" "6cd19ab4-a1c6-11e0-b514-000000004c4c" "6d34d6b0-a1c6-11e0-b514-000000004c4c" "6de667f4-a1c6-11e0-b514-000000004c4c" "6e6563b0-a1c6-11e0-b514-000000004c4c" "4b71a21a-a1c6-11e0-b514-000000004c4c" "4bf1b270-a1c6-11e0-b514-000000004c4c" "4c55f60e-a1c6-11e0-b514-000000004c4c" "4d181cd4-a1c6-11e0-b514-000000004c4c" "4d8b370a-a1c6-11e0-b514-000000004c4c" "4e1fafc0-a1c6-11e0-b514-000000004c4c" "4ef18748-a1c6-11e0-b514-000000004c4c" "4f63607a-a1c6-11e0-b514-000000004c4c" "4ffa7e10-a1c6-11e0-b514-000000004c4c" "50c2403a-a1c6-11e0-b514-000000004c4c" "520875fe-a1c6-11e0-b514-000000004c4c" "52b4f928-a1c6-11e0-b514-000000004c4c" "53474ae4-a1c6-11e0-b514-000000004c4c" "53a54216-a1c6-11e0-b514-000000004c4c" "544af5c6-a1c6-11e0-b514-000000004c4c" "54dd77fc-a1c6-11e0-b514-000000004c4c" "5544407c-a1c6-11e0-b514-000000004c4c" "55e9f792-a1c6-11e0-b514-000000004c4c" "5678b90a-a1c6-11e0-b514-000000004c4c" "56d59396-a1c6-11e0-b514-000000004c4c" "577b54c0-a1c6-11e0-b514-000000004c4c" "580a1192-a1c6-11e0-b514-000000004c4c" "586ca780-a1c6-11e0-b514-000000004c4c" "5902f596-a1c6-11e0-b514-000000004c4c" "598cf71e-a1c6-11e0-b514-000000004c4c" "59e61178-a1c6-11e0-b514-000000004c4c" "5a8cd33c-a1c6-11e0-b514-000000004c4c" "5b2a3294-a1c6-11e0-b514-000000004c4c" "5b854fda-a1c6-11e0-b514-000000004c4c" "5c2be976-a1c6-11e0-b514-000000004c4c" "5cbd73d2-a1c6-11e0-b514-000000004c4c" "5d179434-a1c6-11e0-b514-000000004c4c" "5e4eb9cc-a1c6-11e0-b514-000000004c4c" "5eaf88b0-a1c6-11e0-b514-000000004c4c" "95afa03e-a1c6-11e0-b514-000000004c4c" "9657852e-a1c6-11e0-b514-000000004c4c" "97196b12-a1c6-11e0-b514-000000004c4c" "976e2d14-a1c6-11e0-b514-000000004c4c" "9817af6a-a1c6-11e0-b514-000000004c4c" "98e77902-a1c6-11e0-b514-000000004c4c" "993a4010-a1c6-11e0-b514-000000004c4c" "99d5dd54-a1c6-11e0-b514-000000004c4c" "9a951e6c-a1c6-11e0-b514-000000004c4c" "9ae62348-a1c6-11e0-b514-000000004c4c" "9b80c786-a1c6-11e0-b514-000000004c4c" "9c5e5d4e-a1c6-11e0-b514-000000004c4c" "9caac40e-a1c6-11e0-b514-000000004c4c" "9d4ea402-a1c6-11e0-b514-000000004c4c" "9e05cd8a-a1c6-11e0-b514-000000004c4c" "9e6a4936-a1c6-11e0-b514-000000004c4c" "9f1ac478-a1c6-11e0-b514-000000004c4c" "9fdb0c24-a1c6-11e0-b514-000000004c4c" "a031a408-a1c6-11e0-b514-000000004c4c" "a0ca9654-a1c6-11e0-b514-000000004c4c" "a1864660-a1c6-11e0-b514-000000004c4c" "a1d7456a-a1c6-11e0-b514-000000004c4c" "a27d9e42-a1c6-11e0-b514-000000004c4c" "a351dd42-a1c6-11e0-b514-000000004c4c" "a3e27564-a1c6-11e0-b514-000000004c4c" "a43f55ea-a1c6-11e0-b514-000000004c4c" "a508d91a-a1c6-11e0-b514-000000004c4c" "a598b8d2-a1c6-11e0-b514-000000004c4c" "6f9aa5d8-a1c6-11e0-b514-000000004c4c" "7017dea4-a1c6-11e0-b514-000000004c4c" "712facea-a1c6-11e0-b514-000000004c4c" "71c11e5a-a1c6-11e0-b514-000000004c4c" "72299890-a1c6-11e0-b514-000000004c4c" "72e45446-a1c6-11e0-b514-000000004c4c" "736ab5c2-a1c6-11e0-b514-000000004c4c" "73cf018a-a1c6-11e0-b514-000000004c4c" "749d16ec-a1c6-11e0-b514-000000004c4c" "752a33ce-a1c6-11e0-b514-000000004c4c" "75d363e0-a1c6-11e0-b514-000000004c4c" "767ea76e-a1c6-11e0-b514-000000004c4c" "76cbe222-a1c6-11e0-b514-000000004c4c" "7758ebfe-a1c6-11e0-b514-000000004c4c" "7801523a-a1c6-11e0-b514-000000004c4c" "785c6f9e-a1c6-11e0-b514-000000004c4c" "793f0020-a1c6-11e0-b514-000000004c4c" "79f7053a-a1c6-11e0-b514-000000004c4c" "7a4aae56-a1c6-11e0-b514-000000004c4c" "7aecbfb6-a1c6-11e0-b514-000000004c4c" "7bb44946-a1c6-11e0-b514-000000004c4c" "7c03654e-a1c6-11e0-b514-000000004c4c" "7c9c57f4-a1c6-11e0-b514-000000004c4c" "7d519eca-a1c6-11e0-b514-000000004c4c" "7da2b3fa-a1c6-11e0-b514-000000004c4c" "7e4d157a-a1c6-11e0-b514-000000004c4c" "7f0f34a2-a1c6-11e0-b514-000000004c4c" "7f6204de-a1c6-11e0-b514-000000004c4c" "8007b258-a1c6-11e0-b514-000000004c4c" "80bc11da-a1c6-11e0-b514-000000004c4c" "810fd4e6-a1c6-11e0-b514-000000004c4c" "81b0fcc2-a1c6-11e0-b514-000000004c4c" "82723f90-a1c6-11e0-b514-000000004c4c" "82c5ffcc-a1c6-11e0-b514-000000004c4c" "836815e6-a1c6-11e0-b514-000000004c4c" "84201bd2-a1c6-11e0-b514-000000004c4c" "846daa5a-a1c6-11e0-b514-000000004c4c" "85136da0-a1c6-11e0-b514-000000004c4c" "85d66ce2-a1c6-11e0-b514-000000004c4c" "862b2f2a-a1c6-11e0-b514-000000004c4c" "86cd118c-a1c6-11e0-b514-000000004c4c" "87cca214-a1c6-11e0-b514-000000004c4c" "881e965a-a1c6-11e0-b514-000000004c4c" "88b5e3de-a1c6-11e0-b514-000000004c4c" "89715eca-a1c6-11e0-b514-000000004c4c" "89bfa92c-a1c6-11e0-b514-000000004c4c" "8a6377f0-a1c6-11e0-b514-000000004c4c" "8b259312-a1c6-11e0-b514-000000004c4c" "8b7d2320-a1c6-11e0-b514-000000004c4c" "8c18afac-a1c6-11e0-b514-000000004c4c" "8cd92714-a1c6-11e0-b514-000000004c4c" "8d2bcf96-a1c6-11e0-b514-000000004c4c" "8dc3b27a-a1c6-11e0-b514-000000004c4c" "8e8c6508-a1c6-11e0-b514-000000004c4c" "8eea7c6a-a1c6-11e0-b514-000000004c4c" "8f8ba7c0-a1c6-11e0-b514-000000004c4c" "904cb780-a1c6-11e0-b514-000000004c4c" "909f96d0-a1c6-11e0-b514-000000004c4c" "91429c72-a1c6-11e0-b514-000000004c4c" "91fc363c-a1c6-11e0-b514-000000004c4c" "9250fafa-a1c6-11e0-b514-000000004c4c" "92ec9e56-a1c6-11e0-b514-000000004c4c" "93a75dae-a1c6-11e0-b514-000000004c4c" "93f94592-a1c6-11e0-b514-000000004c4c" "9496c3b2-a1c6-11e0-b514-000000004c4c" "955f4e9a-a1c6-11e0-b514-000000004c4c"

UUIDs are only safe from collisions if they are randomly generated. These clearly have no more than four bytes of entropy rather than the 16 bytes they should have, so I'm concerned they're generated using a non-uniform PRNG.

Re: UUID Algorithm?

PhoneBoy — Mon, 21 Apr 2025 14:23:11 GMT

Those are objects created by people, right?
@Omer_Kleinstern

Re: UUID Algorithm?

Bob_Zimmerman — Mon, 21 Apr 2025 15:49:30 GMT

They were created by a person at some point, but I'm not sure exactly when. They might be from before we upgraded to R80 management.

Edit: Come to think of it, they may have been created with a dbedit script before the upgrade to R80. Still created by admin action, but maybe not from a human clicking around and entering the data.

Re: UUID Algorithm?

Bob_Zimmerman — Wed, 23 Apr 2025 14:58:03 GMT

I just found 721 objects with UUIDs ending with "4bf7-11df-bac0-000000000a0a". This management seems to have a LOT of objects with low-entropy UUIDs.

topic UUID Algorithm? in API / CLI Discussion

UUID Algorithm?

Re: UUID Algorithm?

Re: UUID Algorithm?

Re: UUID Algorithm?