Description
The same public key is used for signing both debug and production code.
Potential Impact
- Confidentiality: Read Memory
How to Fix
Implementation
Use different keys for Production and Debug.
Detection Methods
- Architecture or Design Review: Compare the debug key with the production key to make sure that they are not the same....
- Dynamic Analysis with Manual Results Interpretation: Compare the debug key with the production key to make sure that they are not the same....
Related Weaknesses
References
View on MITRE CWE Database →
