2120
Nature Type ID Name Page
MemberOf 1372 ICS Supply Chain: OT Counterfeit and Malicious
Corruption
1358 2509
MemberOf 1377 ICS Engineering (Construction/Deployment): Inherent
Predictability in Design
1358 2513
MemberOf 1388 Physical Access Issues and Concerns 1194 2518
MemberOf 1413 Comprehensive Categorization: Protection Mechanism
Failure
1400 2542
Notes
Maintenance
This entry is still under development and will continue to see updates and content improvements.
It is more attack-oriented, so it might be more suited for CAPEC.
Related Attack Patterns
CAPEC-ID Attack Pattern Name
37 Retrieve Embedded Sensitive Data
188 Reverse Engineering
545 Pull Data from System Resources
References
[REF-1092]Shahed E. Quadir, Junlin Chen, Domenic Forte, Navid Asadizanjani, Sina
Shahbazmohamadi, Lei Wang, John Chandy and Mark Tehranipoor. "A Survey on Chip to System
Reverse Engineering". < https://dl.acm.org/doi/pdf/10.1145/2755563 >.2023-04-07.
[REF-1129]Christopher Tarnovsky. "Security Failures In Secure Devices". 2008 February 1. <
https://www.blackhat.com/presentations/bh-dc-08/Tarnovsky/Presentation/bh-dc-08-tarnovsky.pdf
>.
CWE-1279: Cryptographic Operations are run Before Supporting Units are
Ready
Weakness ID : 1279
Structure : Simple
Abstraction : Base
Description
Performing cryptographic operations without ensuring that the supporting inputs are ready to supply
valid data may compromise the cryptographic result.
Extended Description
Many cryptographic hardware units depend upon other hardware units to supply information to
them to produce a securely encrypted result. For example, a cryptographic unit that depends
on an external random-number-generator (RNG) unit for entropy must wait until the RNG unit is
producing random numbers. If a cryptographic unit retrieves a private encryption key from a fuse
unit, the fuse unit must be up and running before a key may be supplied.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
CWE Version 4.14
CWE-1279: Cryptographic Operations are run Before Supporting Units are Ready
CWE-1279: Cryptographic Operations are run Before Supporting Units are Ready