Visual RFC.
ALL RFCs / RFC 9562
Read the RFC ↗
RFC 9562 / MECHANISM GUIDE

Generation and privacy limits

05

Uniqueness, ordering, privacy, and unguessability are separate properties.

Related RFCs and changes

“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.

DIAGRAM§ 6.7 ↗
RFC 9562 · § 6.7EXAMPLE
3 / 3
Generation and privacy limitsUniqueness, ordering, privacy, and unguessability are separate properties.Generation and privacy limitsTimestamp prefix reveals timingtime-visible identifier019…known UUIDaccess check
03
Authorize separately

Knowing an identifier must not automatically authorize access.

Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
KEY POINT

Use appropriate generator state and collision resistance for the use case.

  • Use appropriate generator state and collision resistance for the use case.
  • Time-based values can reveal timing, and older layouts can reveal host-related data.
  • UUIDs are identifiers, not bearer capabilities unless a separate secure design establishes that role.
DETAILS

Examples are illustrative. Consult the linked RFC and its errata for implementation details.

Read the RFC section ↗

Diagrams simplify the RFC. Read the linked sections for complete requirements.

Privacy
All chapters in this RFC
  1. UUID fields and text
  2. Random UUID version 4
  3. Time-ordered UUID version 7
  4. Name-based and custom layouts
  5. Generation and privacy limits
RFC 9700 / CHAPTERS

Chapters

For full details, tables, algorithms, and exceptions, read the original RFC.

RFC status and corrections ↗