Cryptography (CRM4)
Cryptography
4
Adel can predict, derive, or recover encryption or signing keys because their generation or derivation uses insufficient entropy, weak parameters, or known or enumerable input values
Scenario: Adel can predict, derive, or recover encryption or signing keys because their generation or derivation uses insufficient entropy, weak parameters, or known or enumerable input values
Example
Threat Modeling
STRIDE
What can go wrong?
What are we going to do about it?
Mappings
STRIDE: -
MASTG: 0204,0205,0208,0311,0349
MASVS: MASVS-CRYPTO-1,MASVS-CRYPTO-2
No attacks registered!
