BaseIncomplete

CWE-1279Cryptographic Operations are run Before Supporting Units are Ready

Category: other

Description

Performing cryptographic operations without ensuring that the supporting inputs are ready to supply valid data may compromise the cryptographic result. Many cryptographic hardware units depend upon other hardware units to supply information to them to produce a securely encrypted result. For example, a cryptographic unit that depends on an external random-number-generator (RNG) unit for entropy must wait until the RNG unit is producing random numbers. If a cryptographic unit retrieves a private encryption key from a fuse unit, the fuse unit must be up and running before a key may be supplied.

Common consequences· 1

  • Access Control / Confidentiality / Integrity / Availability / Accountability / Authentication / Authorization / Non-Repudiation — Varies by Context

Potential mitigations· 2

  • [Architecture and Design]Best practices should be used to design cryptographic systems.
  • [Implementation]Continuously ensuring that cryptographic inputs are supplying valid information is necessary to ensure that the encrypted output is secure.

Related CAPEC attack patterns· 1

CAPEC-97

References

  1. https://cwe.mitre.org/data/definitions/1279.html

Exploits (incoming)1

TypeTargetConfidenceTier
AttackPatternCryptanalysiscapec-97100%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CWE
Improper Handling of Insufficient Entropy in TRNG
CWE
Hardware Logic Contains Race Conditions
CWE
Insufficient Entropy in PRNG
CWE
Hardware Logic with Insecure De-Synchronization between Control and Data Channels
CWE
Use of Predictable Algorithm in Random Number Generator
CWE
Incorrect Selection of Fuse Values
Sourced from MITRE CWE 4.20. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.