2319
Nature Type ID Name Page
MemberOf 699 Software Development 699 2555
MemberOf 1346 OWASP Top Ten 2021 Category A02:2021 -
Cryptographic Failures
1344 2488
HasMember 261 Weak Encoding for Password 699 631
HasMember 324 Use of a Key Past its Expiration Date 699 792
HasMember 325 Missing Cryptographic Step 699 794
HasMember 328 Use of Weak Hash 699 806
HasMember 331 Insufficient Entropy 699 821
HasMember 334 Small Space of Random Values 699 827
HasMember 335 Incorrect Usage of Seeds in Pseudo-Random Number
Generator (PRNG)
699 829
HasMember 338 Use of Cryptographically Weak Pseudo-Random
Number Generator (PRNG)
699 837
HasMember 347 Improper Verification of Cryptographic Signature 699 857
HasMember 916 Use of Password Hash With Insufficient Computational
Effort
699 1813
HasMember 1204 Generation of Weak Initialization Vector (IV) 699 1987
HasMember 1240 Use of a Cryptographic Primitive with a Risky
Implementation
699 2025
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Cryptographic Issues
References
[REF-7]Michael Howard and David LeBlanc. "Writing Secure Code". 2nd Edition. 2002
December 4. Microsoft Press. < https://www.microsoftpressstore.com/store/writing-securecode-
9780735617223 >.
[REF-1287]MITRE. "Supplemental Details - 2022 CWE Top 25". 2022 June 8. < https://
cwe.mitre.org/top25/archive/2022/2022_cwe_top25_supplemental.html#problematicMappingDetails
>.
Category-320: Key Management Errors
Category ID : 320
Summary
Weaknesses in this category are related to errors in the management of cryptographic keys.
Membership
Nature Type ID Name Page
MemberOf 699 Software Development 699 2555
MemberOf 934 OWASP Top Ten 2013 Category A6 - Sensitive Data
Exposure
928 2391
MemberOf 1029 OWASP Top Ten 2017 Category A3 - Sensitive Data
Exposure
1026 2436
HasMember 322 Key Exchange without Entity Authentication 699 788
HasMember 323 Reusing a Nonce, Key Pair in Encryption 699 790
HasMember 324 Use of a Key Past its Expiration Date 699 792
HasMember 798 Use of Hard-coded Credentials 699 1690
CWE Version 4.14
CWE-355: User Interface Security Issues
CWE-355: User Interface Security Issues