Security Knowledgebase / Cryptographic Vulnerability

[/en/] Support Eng ђег Company Home Services Security Assessment Website Security Audit Network Penetration Testing Solutions DataCenter GreenZone Web Application Security Vulnerability Assessment Intrusion Protection System Documentation News and Events Register | LogIn Knowledgebase Downloads Glossary Ask a Question Search: Advanced search Please enter a keyword or ID SHALB.com / Security Knowledgebase / Web Application Security / Vulnerability / Cryptographic Vulnerability Showing: 1-10 of 11 »» Articles Insecure Randomness Insecure Randomness Abstract Standard pseudo-random number generators cannot withstand cryptographic attacks. Description Insecure randomness... 08 May, 2008 Views: 46 J2EE Misconfiguration: Insufficient Session-ID Length J2EE Misconfiguration: Insufficient Session-ID Length Abstract Session identifiers should be at least 128 bits long to prevent brute-force session... 08 May, 2008 Views: 51 Key exchange without entity authentication Key exchange without entity authentication Overview Performing a key exchange without verifying the identity of the entity being communicated with... 08 May, 2008 Views: 41 Non-cryptographic pseudo-random number generator Non-cryptographic pseudo-random number generator Overview The use of Non-cryptographic Pseudo-Random Number Generators (PRNGs) as a source for... 08 May, 2008 Views: 43 Not using a random initialization vector with cipher block chaining mode Not using a random initialization vector with cipher block chaining mode Overview Not using a random initialization vector with Cipher Block... 08 May, 2008 Views: 44 Reusing a nonce, key pair in encryption Reusing a nonce, key pair in encryption Overview Nonces should be used for the present occasion and only once. Consequences ... 08 May, 2008 Views: 44 Testing for SSL-TLS Testing for SSL-TLS Brief Summary Due to historical exporting restrictions of high grade cryptography, legacy and new web servers could be able... 08 May, 2008 Views: 46 Use of hard-coded cryptographic key Use of hard-coded cryptographic key Overview The use of a hard-coded cryptographic key tremendously increases the possibility that encrypted data... 08 May, 2008 Views: 41 Use of hard-coded cryptographic key Use of hard-coded cryptographic key Overview The use of a hard-coded cryptographic key tremendously increases the possibility that encrypted data... 08 May, 2008 Views: 40 Using a broken or risky cryptographic algorithm Using a broken or risky cryptographic algorithm Overview The use of a broken or risky cryptographic algorithm is an unnecessary risk that may... 08 May, 2008 Views: 40 SHALB Security Knowledgebase П 2009 "Shalb" All rights reserved SHALB Home Services Solutions Documentation News and Events