CAPEC 20 Encryption Brute Forcing

Draft Standard Low Risk

Severity Low

Description

An attacker, armed with the cipher text and the encryption algorithm used, performs an exhaustive (brute force) search on the key space to determine the key that decrypts the cipher text to obtain the plaintext.

Attack Execution Flow

Step 1

Explore

Determine the ciphertext and the encryption algorithm.

Step 2

Experiment

Perform an exhaustive brute force search of the key space, producing candidate plaintexts and observing if they make sense.

CAPEC 20 Encryption Brute Forcing

Description

Attack Execution Flow

Step 1

Step 2

Mitigations

In Theory A Brute Force Attack Performing An Exhaustive Key Space Search Will Always Succeed, So The Goal Is To Have Computational Security. Moore'S Law Needs To Be Taken Into Account That Suggests That Computing Resources Double Every Eighteen Months.

Use Commonly Accepted Algorithms And Recommended Key Sizes. The Key Size Used Will Depend On How Important It Is To Keep The Data Confidential And For How Long.

Consequences

Security Scopes Affected

Potential Impacts

Indicators

Relationships

Parent CAPECs

Resources Required

CAPEC 20 Encryption Brute Forcing

Description

Attack Execution Flow

Step 1

Step 2

Mitigations

In Theory A Brute Force Attack Performing An Exhaustive Key Space Search Will Always Succeed, So The Goal Is To Have Computational Security. Moore'S Law Needs To Be Taken Into Account That Suggests That Computing Resources Double Every Eighteen Months.

Use Commonly Accepted Algorithms And Recommended Key Sizes. The Key Size Used Will Depend On How Important It Is To Keep The Data Confidential And For How Long.

Consequences

Security Scopes Affected

Potential Impacts

Indicators

Relationships

Parent CAPECs

Resources Required

Iscriviti alla newsletter