Globally Unique Identifier

The GUID is an implementation by Microsoft of a standard called Universally Unique Identifier or UUID, specified by the Open Software Foundation (OSF). It is essentially a 16-byte number, written in hexadecimal form, such as:

3F2504E0 4f89 11D3 9A 0C 03 05 E8 2C 33 01

GUIDs are written using a four-byte word, 2 two-byte words, and 8 one-byte words. The structure of the data type is:

  GUID STRUCT
      Data1   dd
      Data2   dw
      Data3   dw
      Data4   db 8
  GUID ENDS

In the Microsoft component object model, GUIDs are used to uniquely distinguish different software component interfaces. This means that two versions of a component can have exactly the same name, but still be different to the user in case the GUID has changed.

The GUID are also inserted into documents from Microsoft Office programs, as these are regarded as objects as well.

Algorithm

The algorithm used for generating new GUIDs has been widely criticized. At one point, the users network card MAC address was used as a base for several GUID digits, which meant that e.g. a document could be tracked back to the computer that created it. After this was discovered, Microsoft changed the algorithm so that it no longer contains the MAC address. This privacy hole was used when locating the creator of the Melissa worm.

See Also

• Universally Unique Identifier
• Component object model
• Melissa worm