Cryptographic Issues

Opis

Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.

Wpisy w tej grupie

• CWE-261 Weak Encoding for Password
• CWE-324 Use of a Key Past its Expiration Date
• CWE-325 Missing Cryptographic Step
• CWE-328 Use of Weak Hash
• CWE-331 Insufficient Entropy
• CWE-334 Small Space of Random Values
• CWE-335 Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)
• CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
• CWE-347 Improper Verification of Cryptographic Signature
• CWE-916 Use of Password Hash With Insufficient Computational Effort
• CWE-1204 Generation of Weak Initialization Vector (IV)
• CWE-1240 Use of a Cryptographic Primitive with a Risky Implementation

Źródła