CWE-1279: Cryptographic Operations are run Before Supporting Units are Ready
Performing cryptographic operations without ensuring that the supporting inputs are ready to supply valid data may compromise the cryptographic result.
Last updated
Overview
Many cryptographic hardware units depend upon other hardware units to supply information to them to produce a securely encrypted result. For example, a cryptographic unit that depends on an external random-number-generator (RNG) unit for entropy must wait until the RNG unit is producing random numbers. If a cryptographic unit retrieves a private encryption key from a fuse unit, the fuse unit must be up and running before a key may be supplied.
Real-world CVEs
1 recorded CVEs are caused by CWE-1279 (Cryptographic Operations are run Before Supporting Units are Ready). The highest-severity and most recent are shown first.
Common consequences
What can happen when CWE-1279 is exploited.
Varies by Context
Affects: Access Control, Confidentiality, Integrity, Availability, Accountability, Authentication, Authorization, Non-Repudiation
How it happens
When it is introduced
Typically introduced during these phases of the software lifecycle.