CWE-1279—Cryptographic Operations are run Before Supporting Units are Ready

名称

Cryptographic Operations are run Before Supporting Units are Ready

描述

Performing cryptographic operations without ensuring that the supporting inputs are ready to supply valid data may compromise the cryptographic result.

Many cryptographic hardware units depend upon other hardware units to supply information to them to produce a securely encrypted result. For example, a cryptographic unit that depends on an external random-number-generator (RNG) unit for entropy must wait until the RNG unit is producing random numbers. If a cryptographic unit retrieves a private encryption key from a fuse unit, the fuse unit must be up and running before a key may be supplied.

常见后果

范围：

Access Control, Confidentiality, Integrity, Availability, Accountability, Authentication, Authorization, Non-Repudiation

影响：

Varies by Context

相关 CWE

• CWE-665Improper InitializationMedium
• CWE-696Incorrect Behavior Order