How to predict the next GUID from a given GUID?

Question

Hi, i have sent 10000 mails to our customers and each mail had a link of the format http://example.com/LogIn?key={guid}

unfortunately the guid i sent were random guids (test data generated by Guid.NewGuid()) so the customers have all received invalid links...

based on the 404s i receive from the webserver i have a few guids that i sent out. i have read that the guid generator in windows is weak so you can predict the next guid from one you already have. does anyone know how? if i could do that i could make the guids i sent out valid so the links would work again.

Answer 1

Part of a GUID is the current date/time. If you happen to receive two of them sequentially, then you can tell how fast they are being created and therefore predict the sequence with strong confidence.

Answer 2

There are several different types of guids. Type 1 uses a host ID - usually a mac address - a sequence number, and the current date and time. Type 4 is entirely random. If it's a type 1 UUID, you can probably figure out a fairly restricted set of likely UUIDs, but even so, you're not going to be able to generate a single sequence of UUIDs, so you won't be able to pin down a specific UUID to a specific user.

Answer 3

The way Windows has generated GUIDs has changed several times, and lots of seemingly reliable advice on the internet is completely wrong (maybe just out of date, maybe always completely wrong).

The last time I looked into this (a few years ago, probably XP SP2), I stepped right down into the OS code to see what was actually happening, and it was generating a random number with the secure random number generator.

I doubt you'll have much luck predicting one GUID from another if you generated them in the default way.

Answer 4

Predicting the next GUID would be unreliable even if you could do it, but more than likely is completely impossible with the resources at your disposal.

Your best bet here is to simply add a manual redirect from any non-matching GUID to a generic page that either explains what went wrong or just programmatically figures out where they should have ended up and sends them there.