topic Re: UUID Algorithm? in API / CLI Discussion https://community.checkpoint.com/t5/API-CLI-Discussion/UUID-Algorithm/m-p/247131#M9029 <P>I just found 721 objects with UUIDs ending with "<SPAN class="s1">4bf7-11df-bac0-000000000a0a". This management seems to have a&nbsp;<STRONG>LOT</STRONG> of objects with low-entropy UUIDs.</SPAN></P> Wed, 23 Apr 2025 14:58:03 GMT Bob_Zimmerman 2025-04-23T14:58:03Z UUID Algorithm? https://community.checkpoint.com/t5/API-CLI-Discussion/UUID-Algorithm/m-p/246854#M9023 <P>It was recently pointed out to me that we have somewhere around 45k unused objects across our firewall managements. I've been identifying and deleting them, but in doing so, I found some runs of UUIDs which are similar enough I'm concerned about the randomness of UUID generation on the management servers. These are all from admin-created objects, not default objects from Check Point:</P> <LI-CODE lang="markup">"6c3e5ac6-59c8-11de-912d-00000000c0c0" "6c5bc390-59c8-11de-912d-00000000c0c0" "6889d7e8-59c8-11de-912d-00000000c0c0" "68ec706a-59c8-11de-912d-00000000c0c0" "690982fe-59c8-11de-912d-00000000c0c0" "6c763b80-59c8-11de-912d-00000000c0c0" "692295c8-59c8-11de-912d-00000000c0c0" "6942f714-59c8-11de-912d-00000000c0c0" "69649c2a-59c8-11de-912d-00000000c0c0" "69a7cc2a-59c8-11de-912d-00000000c0c0" "6ba21350-59c8-11de-912d-00000000c0c0" "6bbe93ae-59c8-11de-912d-00000000c0c0" "6bdd0d8e-59c8-11de-912d-00000000c0c0" "6bfd7da8-59c8-11de-912d-00000000c0c0" "6c180aec-59c8-11de-912d-00000000c0c0" "69caa2d6-59c8-11de-912d-00000000c0c0" "69e8f736-59c8-11de-912d-00000000c0c0" "6a0741be-59c8-11de-912d-00000000c0c0" "6a2420fe-59c8-11de-912d-00000000c0c0" "6a8313ca-59c8-11de-912d-00000000c0c0" "6ac712dc-59c8-11de-912d-00000000c0c0" "6ae6909e-59c8-11de-912d-00000000c0c0" "6b05d8be-59c8-11de-912d-00000000c0c0" "6b27d2b6-59c8-11de-912d-00000000c0c0" "6b468c6a-59c8-11de-912d-00000000c0c0" "6b801124-59c8-11de-912d-00000000c0c0" "5f6799aa-a1c6-11e0-b514-000000004c4c" "5ffbf104-a1c6-11e0-b514-000000004c4c" "605d6c7c-a1c6-11e0-b514-000000004c4c" "610321bc-a1c6-11e0-b514-000000004c4c" "619589d0-a1c6-11e0-b514-000000004c4c" "61eb2778-a1c6-11e0-b514-000000004c4c" "62b58824-a1c6-11e0-b514-000000004c4c" "636742f8-a1c6-11e0-b514-000000004c4c" "64134f9e-a1c6-11e0-b514-000000004c4c" "64961870-a1c6-11e0-b514-000000004c4c" "6502de2e-a1c6-11e0-b514-000000004c4c" "65b646d0-a1c6-11e0-b514-000000004c4c" "664c63f4-a1c6-11e0-b514-000000004c4c" "66ad25ea-a1c6-11e0-b514-000000004c4c" "67650e62-a1c6-11e0-b514-000000004c4c" "67dda958-a1c6-11e0-b514-000000004c4c" "6841db94-a1c6-11e0-b514-000000004c4c" "68f1b686-a1c6-11e0-b514-000000004c4c" "6971bb10-a1c6-11e0-b514-000000004c4c" "69dd44b6-a1c6-11e0-b514-000000004c4c" "6a8d27fa-a1c6-11e0-b514-000000004c4c" "6b1f0530-a1c6-11e0-b514-000000004c4c" "6b9209e0-a1c6-11e0-b514-000000004c4c" "6c47550c-a1c6-11e0-b514-000000004c4c" "6cd19ab4-a1c6-11e0-b514-000000004c4c" "6d34d6b0-a1c6-11e0-b514-000000004c4c" "6de667f4-a1c6-11e0-b514-000000004c4c" "6e6563b0-a1c6-11e0-b514-000000004c4c" "4b71a21a-a1c6-11e0-b514-000000004c4c" "4bf1b270-a1c6-11e0-b514-000000004c4c" "4c55f60e-a1c6-11e0-b514-000000004c4c" "4d181cd4-a1c6-11e0-b514-000000004c4c" "4d8b370a-a1c6-11e0-b514-000000004c4c" "4e1fafc0-a1c6-11e0-b514-000000004c4c" "4ef18748-a1c6-11e0-b514-000000004c4c" "4f63607a-a1c6-11e0-b514-000000004c4c" "4ffa7e10-a1c6-11e0-b514-000000004c4c" "50c2403a-a1c6-11e0-b514-000000004c4c" "520875fe-a1c6-11e0-b514-000000004c4c" "52b4f928-a1c6-11e0-b514-000000004c4c" "53474ae4-a1c6-11e0-b514-000000004c4c" "53a54216-a1c6-11e0-b514-000000004c4c" "544af5c6-a1c6-11e0-b514-000000004c4c" "54dd77fc-a1c6-11e0-b514-000000004c4c" "5544407c-a1c6-11e0-b514-000000004c4c" "55e9f792-a1c6-11e0-b514-000000004c4c" "5678b90a-a1c6-11e0-b514-000000004c4c" "56d59396-a1c6-11e0-b514-000000004c4c" "577b54c0-a1c6-11e0-b514-000000004c4c" "580a1192-a1c6-11e0-b514-000000004c4c" "586ca780-a1c6-11e0-b514-000000004c4c" "5902f596-a1c6-11e0-b514-000000004c4c" "598cf71e-a1c6-11e0-b514-000000004c4c" "59e61178-a1c6-11e0-b514-000000004c4c" "5a8cd33c-a1c6-11e0-b514-000000004c4c" "5b2a3294-a1c6-11e0-b514-000000004c4c" "5b854fda-a1c6-11e0-b514-000000004c4c" "5c2be976-a1c6-11e0-b514-000000004c4c" "5cbd73d2-a1c6-11e0-b514-000000004c4c" "5d179434-a1c6-11e0-b514-000000004c4c" "5e4eb9cc-a1c6-11e0-b514-000000004c4c" "5eaf88b0-a1c6-11e0-b514-000000004c4c" "95afa03e-a1c6-11e0-b514-000000004c4c" "9657852e-a1c6-11e0-b514-000000004c4c" "97196b12-a1c6-11e0-b514-000000004c4c" "976e2d14-a1c6-11e0-b514-000000004c4c" "9817af6a-a1c6-11e0-b514-000000004c4c" "98e77902-a1c6-11e0-b514-000000004c4c" "993a4010-a1c6-11e0-b514-000000004c4c" "99d5dd54-a1c6-11e0-b514-000000004c4c" "9a951e6c-a1c6-11e0-b514-000000004c4c" "9ae62348-a1c6-11e0-b514-000000004c4c" "9b80c786-a1c6-11e0-b514-000000004c4c" "9c5e5d4e-a1c6-11e0-b514-000000004c4c" "9caac40e-a1c6-11e0-b514-000000004c4c" "9d4ea402-a1c6-11e0-b514-000000004c4c" "9e05cd8a-a1c6-11e0-b514-000000004c4c" "9e6a4936-a1c6-11e0-b514-000000004c4c" "9f1ac478-a1c6-11e0-b514-000000004c4c" "9fdb0c24-a1c6-11e0-b514-000000004c4c" "a031a408-a1c6-11e0-b514-000000004c4c" "a0ca9654-a1c6-11e0-b514-000000004c4c" "a1864660-a1c6-11e0-b514-000000004c4c" "a1d7456a-a1c6-11e0-b514-000000004c4c" "a27d9e42-a1c6-11e0-b514-000000004c4c" "a351dd42-a1c6-11e0-b514-000000004c4c" "a3e27564-a1c6-11e0-b514-000000004c4c" "a43f55ea-a1c6-11e0-b514-000000004c4c" "a508d91a-a1c6-11e0-b514-000000004c4c" "a598b8d2-a1c6-11e0-b514-000000004c4c" "6f9aa5d8-a1c6-11e0-b514-000000004c4c" "7017dea4-a1c6-11e0-b514-000000004c4c" "712facea-a1c6-11e0-b514-000000004c4c" "71c11e5a-a1c6-11e0-b514-000000004c4c" "72299890-a1c6-11e0-b514-000000004c4c" "72e45446-a1c6-11e0-b514-000000004c4c" "736ab5c2-a1c6-11e0-b514-000000004c4c" "73cf018a-a1c6-11e0-b514-000000004c4c" "749d16ec-a1c6-11e0-b514-000000004c4c" "752a33ce-a1c6-11e0-b514-000000004c4c" "75d363e0-a1c6-11e0-b514-000000004c4c" "767ea76e-a1c6-11e0-b514-000000004c4c" "76cbe222-a1c6-11e0-b514-000000004c4c" "7758ebfe-a1c6-11e0-b514-000000004c4c" "7801523a-a1c6-11e0-b514-000000004c4c" "785c6f9e-a1c6-11e0-b514-000000004c4c" "793f0020-a1c6-11e0-b514-000000004c4c" "79f7053a-a1c6-11e0-b514-000000004c4c" "7a4aae56-a1c6-11e0-b514-000000004c4c" "7aecbfb6-a1c6-11e0-b514-000000004c4c" "7bb44946-a1c6-11e0-b514-000000004c4c" "7c03654e-a1c6-11e0-b514-000000004c4c" "7c9c57f4-a1c6-11e0-b514-000000004c4c" "7d519eca-a1c6-11e0-b514-000000004c4c" "7da2b3fa-a1c6-11e0-b514-000000004c4c" "7e4d157a-a1c6-11e0-b514-000000004c4c" "7f0f34a2-a1c6-11e0-b514-000000004c4c" "7f6204de-a1c6-11e0-b514-000000004c4c" "8007b258-a1c6-11e0-b514-000000004c4c" "80bc11da-a1c6-11e0-b514-000000004c4c" "810fd4e6-a1c6-11e0-b514-000000004c4c" "81b0fcc2-a1c6-11e0-b514-000000004c4c" "82723f90-a1c6-11e0-b514-000000004c4c" "82c5ffcc-a1c6-11e0-b514-000000004c4c" "836815e6-a1c6-11e0-b514-000000004c4c" "84201bd2-a1c6-11e0-b514-000000004c4c" "846daa5a-a1c6-11e0-b514-000000004c4c" "85136da0-a1c6-11e0-b514-000000004c4c" "85d66ce2-a1c6-11e0-b514-000000004c4c" "862b2f2a-a1c6-11e0-b514-000000004c4c" "86cd118c-a1c6-11e0-b514-000000004c4c" "87cca214-a1c6-11e0-b514-000000004c4c" "881e965a-a1c6-11e0-b514-000000004c4c" "88b5e3de-a1c6-11e0-b514-000000004c4c" "89715eca-a1c6-11e0-b514-000000004c4c" "89bfa92c-a1c6-11e0-b514-000000004c4c" "8a6377f0-a1c6-11e0-b514-000000004c4c" "8b259312-a1c6-11e0-b514-000000004c4c" "8b7d2320-a1c6-11e0-b514-000000004c4c" "8c18afac-a1c6-11e0-b514-000000004c4c" "8cd92714-a1c6-11e0-b514-000000004c4c" "8d2bcf96-a1c6-11e0-b514-000000004c4c" "8dc3b27a-a1c6-11e0-b514-000000004c4c" "8e8c6508-a1c6-11e0-b514-000000004c4c" "8eea7c6a-a1c6-11e0-b514-000000004c4c" "8f8ba7c0-a1c6-11e0-b514-000000004c4c" "904cb780-a1c6-11e0-b514-000000004c4c" "909f96d0-a1c6-11e0-b514-000000004c4c" "91429c72-a1c6-11e0-b514-000000004c4c" "91fc363c-a1c6-11e0-b514-000000004c4c" "9250fafa-a1c6-11e0-b514-000000004c4c" "92ec9e56-a1c6-11e0-b514-000000004c4c" "93a75dae-a1c6-11e0-b514-000000004c4c" "93f94592-a1c6-11e0-b514-000000004c4c" "9496c3b2-a1c6-11e0-b514-000000004c4c" "955f4e9a-a1c6-11e0-b514-000000004c4c" </LI-CODE> <P>UUIDs are only safe from collisions if they are randomly generated. These clearly have no more than four bytes of entropy rather than the 16 bytes they should have, so I'm concerned they're generated using a non-uniform PRNG.</P> Fri, 18 Apr 2025 17:12:19 GMT https://community.checkpoint.com/t5/API-CLI-Discussion/UUID-Algorithm/m-p/246854#M9023 Bob_Zimmerman 2025-04-18T17:12:19Z Re: UUID Algorithm? https://community.checkpoint.com/t5/API-CLI-Discussion/UUID-Algorithm/m-p/246919#M9024 <P>Those are objects created by people, right?<BR /><a href="https://community.checkpoint.com/t5/user/viewprofilepage/user-id/37502">@Omer_Kleinstern</a>&nbsp;</P> Mon, 21 Apr 2025 14:23:11 GMT https://community.checkpoint.com/t5/API-CLI-Discussion/UUID-Algorithm/m-p/246919#M9024 PhoneBoy 2025-04-21T14:23:11Z Re: UUID Algorithm? https://community.checkpoint.com/t5/API-CLI-Discussion/UUID-Algorithm/m-p/246927#M9025 <P>They were created by a person at some point, but I'm not sure exactly when. They might be from before we upgraded to R80 management.</P> <P><STRONG>Edit</STRONG>: Come to think of it, they may have been created with a dbedit script before the upgrade to R80. Still created by admin action, but maybe not from a human clicking around and entering the data.</P> Mon, 21 Apr 2025 15:49:30 GMT https://community.checkpoint.com/t5/API-CLI-Discussion/UUID-Algorithm/m-p/246927#M9025 Bob_Zimmerman 2025-04-21T15:49:30Z Re: UUID Algorithm? https://community.checkpoint.com/t5/API-CLI-Discussion/UUID-Algorithm/m-p/247131#M9029 <P>I just found 721 objects with UUIDs ending with "<SPAN class="s1">4bf7-11df-bac0-000000000a0a". This management seems to have a&nbsp;<STRONG>LOT</STRONG> of objects with low-entropy UUIDs.</SPAN></P> Wed, 23 Apr 2025 14:58:03 GMT https://community.checkpoint.com/t5/API-CLI-Discussion/UUID-Algorithm/m-p/247131#M9029 Bob_Zimmerman 2025-04-23T14:58:03Z