CWE-323

Reusing a Nonce, Key Pair in Encryption

High

Description

Nonces should be used for the present occasion and only once.

Potential Impact

How to Fix

Implementation

Refuse to reuse nonce values.

Implementation

Use techniques such as requiring incrementing, time based and/or challenge response to assure uniqueness of nonces.

Detection Methods

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-323 vulnerabilities in your codebase.

Get Security Assessment