Cryptography (CRMX)
Cryptography
10
Kouti can extract cryptographic keys or sensitive data because they are hard-coded or stored without encryption or appropriate platform protection in app-private or shared storage
Scenario: Kouti can extract cryptographic keys or sensitive data because they are hard-coded or stored without encryption or appropriate platform protection in app-private or shared storage
Example
Threat Modeling
STRIDE
What can go wrong?
What are we going to do about it?
Mappings
STRIDE: -
MASTG: 0200,0201,0202,0207,0212,0213,0214,0299,0300,0301,0302,0303,0304,0305,0306
MASTG Know: 0042,0041,0012,0082,0091,0108,0057,0122,0037
MASVS: MASVS-STORAGE-1,MASVS-STORAGE-2,MASVS-CRYPTO-2
No attacks registered!
