Skip to main content

Use initialization vectors once

Summary​

The system should use initialization vectors, nonces and other single use numbers only once with a given encryption key.

Description​

The system's cryptographic keys are essential for maintaining the confidentiality and integrity of transactions and communications. Some encryption mechanisms use initialization vectors to reduce the chances that a message will be decrypted. These vectors should be generated using cryptographically secure random number generators and should only be used once with a given encryption key.

Supported In​

This requirement is verified in following services

PlanSupported
Essential🔴
Advanced🟢

References​

free trial

Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' hacking team, fill out this contact form.