Cryptography (CRM3)
Cryptography
3
Orace can compromise protected data because random values used to generate cryptographic keys, initialization vectors, or nonces are predictable
Scenario: Orace can compromise protected data because random values used to generate cryptographic keys, initialization vectors, or nonces are predictable
Example
Threat Modeling
STRIDE
What can go wrong?
What are we going to do about it?
Mappings
STRIDE: -
MASWE: 0012
MASVS: MASVS-CRYPTO-1
No attacks registered!
