327
ISA/IEC 62443 Part 3-3 Req SR 4.3
ISA/IEC 62443 Part 4-2 Req CR 4.3
Related Attack Patterns
CAPEC-ID Attack Pattern Name
20 Encryption Brute Forcing
97 Cryptanalysis
459 Creating a Rogue Certification Authority Certificate
473 Signature Spoof
475 Signature Spoofing by Improper Validation
608 Cryptanalysis of Cellular Encryption
614 Rooting SIM Cards
References
[REF-280]Bruce Schneier. "Applied Cryptography". 1996. John Wiley & Sons. < https://
www.schneier.com/books/applied-cryptography >.2023-04-07.
[REF-281]Alfred J. Menezes, Paul C. van Oorschot and Scott A. Vanstone. "Handbook of Applied
Cryptography". 1996 October. < https://cacr.uwaterloo.ca/hac/ >.2023-04-07.
[REF-282]C Matthew Curtin. "Avoiding bogus encryption products: Snake Oil FAQ". 1998 April 0. <
http://www.faqs.org/faqs/cryptography-faq/snake-oil/ >.
[REF-267]Information Technology Laboratory, National Institute of Standards and Technology.
"SECURITY REQUIREMENTS FOR CRYPTOGRAPHIC MODULES". 2001 May 5. < https://
csrc.nist.gov/csrc/media/publications/fips/140/2/final/documents/fips1402.pdf >.2023-04-07.
[REF-284]Paul F. Roberts. "Microsoft Scraps Old Encryption in New Code". 2005 September 5. <
https://www.eweek.com/security/microsoft-scraps-old-encryption-in-new-code/ >.2023-04-07.
[REF-7]Michael Howard and David LeBlanc. "Writing Secure Code". 2nd Edition. 2002
December 4. Microsoft Press. < https://www.microsoftpressstore.com/store/writing-securecode-
9780735617223 >.
[REF-44]Michael Howard, David LeBlanc and John Viega. "24 Deadly Sins of Software Security".
McGraw-Hill. 2010.
[REF-287]Johannes Ullrich. "Top 25 Series - Rank 24 - Use of a Broken or Risky Cryptographic
Algorithm". 2010 March 5. SANS Software Security Institute. < https://www.sans.org/blog/top-25-
series-use-of-a-broken-or-risky-cryptographic-algorithm/ >.2023-04-07.
CWE Version 4.14
CWE-328: Use of Weak Hash
CWE-328: Use of Weak Hash