I wrote a similar scheme for UEFA and Euro stickers in 2008. If they use the same scheme, it's a simple numeric sequence encoded via a PRP.

So basically we took numbers from, say 1000 to 3000 as "valid" codes, used a modified implementation of RSA to encrypt them to numbers in a specifically sized domain and then base-30 encoding them, to exclude pairs of hard to distinguish digits and numbers (5 and S, 1 and I, 0 and O).

To validate the codes, the code needs to decrypt the number and verify that the value is within our allowed range (in this example, 1000 to 3000).

This is relatively safe if the domain is big enough that random guessing has a very low probability of hitting a valid code. On the other hand, the domain needs to me small enough that the codes can be easily typed, typically 12 digits is way more than we would have done.

By PRP do you mean "Pseudo Random Permutation"?

Would you be able to outline some psuedo code to explain your answer?

I tried out the codes from this rather spammy page on the FIFA stickers app (http://en.stickeralbum.fifa.com/), and they always seem to work, so it appears that the person that put it together has either figured out the algorithm, or knows what it was to start with!

Yes, pseudo-random permutation.

The basic algorithm goes like this. To generate the codes

    generate_codes(range valid_range)

      for(i in valid_range)
        encoded = RSA.Encode(key, i)
        code = base32.Encode(encoded)
        print code

and then, to verify a code

    verify(string code, range valid_range)

      encoded = base32.Decode(code)
      value = RSA.Decode(key, encoded)

      return valid_range.contains(value)

where of course RSA is an implementation of http://en.wikipedia.org/wiki/RSA_(cryptosystem) and base32 refers to http://en.wikipedia.org/wiki/Base32.

On top of that, we needed codes to be of a specified maximum length and with a specified alphabet. Thus, instead of base32 we used a different base with different letters, but the same algorithm. To fix the length of the codes, we needed the output of RSA encode to be less than a specific value. In RSA this can be controlled by choosing the modulus part of the key.

There are more subtleties to this, but the gist is there.

Thanks for this. Very interesting.

I assume that without the RSA key I cannot generate these codes myself then, even if I was to guess at the range?

Yes, that's the idea :-)

Ok, thus, if a similar scheme is being used for the FIFA stickers, the person that put this together (http://fifapaninicode7.appspot.com/) must know the RSA key!

Or they simply have a list of codes...

Did you check that these codes work and are not just a ruse?

They do work.

From eyeballing, pattern is always: Axxx-x1xx-x1xx

It's not base 36 since there are only 34 distinct characters here (there's the entire alphabet and digits except for 0 and O).

What is this from?

Some game codes actually consists of a memory address and data to write into that address so you wouldn't expect there to be a simple sequence.

I'm trying to figure out how these FIFA online sticker codes have been generated: Warning Ads! Disable JavaScript.

http://fifapaninicode7.appspot.com/

I was trying to figure out how they cracked it. Was harder than I thought. Thought I'd ask the brains on HN! :-)

And here's some code I was mucking around with:

https://dotnetfiddle.net/lSHie4

A couple of things caught my interest so far as possibles:

http://en.wikipedia.org/wiki/International_Securities_Identi...

http://en.wikipedia.org/wiki/Base_36#Uses_in_practice

How about Global Thermonuclear War?

I wondered if anyone would get the reference :-)

Given "ALS8-61UG-41JA" is separated into blocks by "-" the second character of block #2 ("-61UG-") and block #3 ("41JA") is always "1" in the examples you posted.

Are these codes generated from a binary which you have access to? You might have an easier time reverse-engineering it, if your local laws allows to do so.

For the source of these codes, check out my answer here: https://news.ycombinator.com/item?id=8113746

Are these codes in any particular order?

Nope. Just generated at random. See my answer above for the source of those codes.