Weakness (CWE)
CWE-1279: Cryptographic Operations are Run Before Supporting Units are Ready
Performing cryptographic operations without ensuring that the supporting inputs are ready to supply valid data may compromise the cryptographic result.
How to prevent it (2 mitigations)
-
Architecture and Design
Best practices should be used to design cryptographic systems. If a cryptographic unit retrieves a private encryption key from a fuse unit, the fuse unit must be up and running before a key may be supplied.
-
Implementation
Continuously ensuring that cryptographic inputs are supplying valid information is necessary to ensure that the encrypted output is secure.
Source: MITRE CWE-1279
0 results · Clear filters · Feed