Skip to content
OpenAdvisories

Weakness (CWE)

CWE-333: Improper Handling of Insufficient Entropy in TRNG

Variant Draft

True random number generators (TRNG) generally have a limited source of entropy and therefore can fail or block.

How to prevent it (2 mitigations)

  1. Implementation

    Since the rate at which true random numbers can be generated is limited, it is important that one uses them only when they are needed for security.

  2. Implementation

    Rather than failing on a lack of random numbers, it is often preferable to wait for more numbers to be created.

Source: MITRE CWE-333

All Critical High Medium Low Exploited only Public exploit

1 result · Feed