829
PeerOf 341 Predictable from Observable State 843
Relevant to the view "Architectural Concepts" (CWE-1008)
Nature Type ID Name Page
MemberOf 1013 Encrypt Data 2428
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Other Varies by Context
Potential Mitigations
Phase: Architecture and Design
Use well vetted pseudo-random number generating algorithms with adequate length seeds.
Pseudo-random number generators can produce predictable numbers if the generator is known
and the seed can be guessed. A 256-bit seed is a good starting point for producing a "random
enough" number.
Phase: Architecture and Design
Phase: Requirements
Strategy = Libraries or Frameworks
CWE Version 4.14
CWE-339: Small Seed Space in PRNG
CWE-339: Small Seed Space in PRNG