Skip to content
OpenAdvisories

Weakness (CWE)

CWE-323: Reusing a Nonce, Key Pair in Encryption

Base Incomplete

Nonces should be used for the present occasion and only once.

How to prevent it (2 mitigations)

  1. Implementation

    Refuse to reuse nonce values.

  2. Implementation

    Use techniques such as requiring incrementing, time based and/or challenge response to assure uniqueness of nonces.

Source: MITRE CWE-323

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.