1990
Reference Description
CVE-2007-3528 Blowfish-CBC implementation constructs an IV where each byte is calculated
modulo 8 instead of modulo 256, resulting in less than 12 bits for the effective
IV length, and less than 4096 possible IV values.
https://www.cve.org/CVERecord?id=CVE-2007-3528
Functional Areas
• Cryptography
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1414 Comprehensive Categorization: Randomness 1400 2543
Notes
Maintenance
As of CWE 4.5, terminology related to randomness, entropy, and predictability can vary widely.
Within the developer and other communities, "randomness" is used heavily. However, within
cryptography, "entropy" is distinct, typically implied as a measurement. There are no commonlyused
definitions, even within standards documents and cryptography papers. Future versions of
CWE will attempt to define these terms and, if necessary, distinguish between them in ways that
are appropriate for different communities but do not reduce the usability of CWE for mapping,
understanding, or other scenarios.
Related Attack Patterns
CAPEC-ID Attack Pattern Name
20 Encryption Brute Forcing
97 Cryptanalysis
References
[REF-1175]Nikita Borisov, Ian Goldberg and David Wagner. "Intercepting Mobile Communications:
The Insecurity of 802.11". Proceedings of the Seventh Annual International Conference on
Mobile Computing And Networking. 2001 July. ACM. < http://www.isaac.cs.berkeley.edu/isaac/
mobicom.pdf >.
[REF-1175]Nikita Borisov, Ian Goldberg and David Wagner. "Intercepting Mobile Communications:
The Insecurity of 802.11". Proceedings of the Seventh Annual International Conference on
Mobile Computing And Networking. 2001 July. ACM. < http://www.isaac.cs.berkeley.edu/isaac/
mobicom.pdf >.
[REF-1176]Wikipedia. "Birthday problem". 2021 March 6. < https://en.wikipedia.org/wiki/
Birthday_problem >.
[REF-1177]Wikipedia. "Initialization Vector". 2021 March 8. < https://en.wikipedia.org/wiki/
Initialization_vector >.
[REF-1178]NIST. "Recommendation for Block Cipher Modes of Operation: Galois/Counter
Mode (GCM) and GMAC". 2007 November. < https://nvlpubs.nist.gov/nistpubs/Legacy/SP/
nistspecialpublication800-38d.pdf >.2023-04-07.
[REF-1179]Arxum Path Security. "CBC Mode is Malleable. Don't trust it for Authentication". 2019
October 6. < https://arxumpathsecurity.com/blog/2019/10/16/cbc-mode-is-malleable-dont-trust-itfor-
authentication >.2023-04-07.
CWE Version 4.14
CWE-1209: Failure to Disable Reserved Bits
CWE-1209: Failure to Disable Reserved Bits