796
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 719 OWASP Top Ten 2007 Category A8 - Insecure
Cryptographic Storage
629 2333
MemberOf 720 OWASP Top Ten 2007 Category A9 - Insecure
Communications
629 2333
MemberOf 884 CWE Cross-section 884 2567
MemberOf 934 OWASP Top Ten 2013 Category A6 - Sensitive Data
Exposure
928 2391
MemberOf 958 SFP Secondary Cluster: Broken Cryptography 888 2398
MemberOf 1029 OWASP Top Ten 2017 Category A3 - Sensitive Data
Exposure
1026 2436
MemberOf 1205 Security Primitives and Cryptography Issues 1194 2473
MemberOf 1346 OWASP Top Ten 2021 Category A02:2021 -
Cryptographic Failures
1344 2488
MemberOf 1366 ICS Communications: Frail Security in Protocols 1358 2503
MemberOf 1402 Comprehensive Categorization: Encryption 1400 2527
Notes
Relationship
Overlaps incomplete/missing security check.
Relationship
Can be resultant.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Missing Required Cryptographic Step
OWASP Top Ten 2007 A8 CWE More Specific Insecure Cryptographic Storage
OWASP Top Ten 2007 A9 CWE More Specific Insecure Communications
Related Attack Patterns
CAPEC-ID Attack Pattern Name
68 Subvert Code-signing Facilities
References
[REF-1358]"hmac_wrapper.sv". 2021. < https://github.com/HACK-EVENT/hackatdac21/blob/main/
piton/design/chip/tile/ariane/src/hmac/hmac_wrapper.sv#L41 >.2023-07-15.
[REF-1359]"HMAC HWIP Technical Specification". 2023. < https://opentitan.org/book/hw/ip/hmac/
>.2023-10-05.
CWE-326: Inadequate Encryption Strength
Weakness ID : 326
Structure : Simple
Abstraction : Class
Description
The product stores or transmits sensitive data using an encryption scheme that is theoretically
sound, but is not strong enough for the level of protection required.
CWE Version 4.14
CWE-326: Inadequate Encryption Strength
CWE-326: Inadequate Encryption Strength