CWE-323
Reusing a Nonce, Key Pair in Encryption
AI Translation Available
Nonces should be used for the present occasion and only once.
Status
incomplete
Abstraction
base
Likelihood
high
Affected Platforms
Technical Details
AI Translation
Common Consequences
access control
Impacts
bypass protection mechanism
gain privileges or assume identity
Detection Methods
automated static analysis
Potential Mitigations
Phases:
implementation
Descriptions:
•
Use techniques such as requiring incrementing, time based and/or challenge response to assure uniqueness of nonces.
•
Refuse to reuse nonce values.