PRNG Seed Error

Thank you for visiting OWASP.org. We have migrated our community to a new web platform and regretably the content for this page needed to be programmatically ported from its previous wiki page. There’s still some work to be done.

Description

The incorrect use of a seed by a Psuedo Random Number Generator 1. A seed error is usually brought on through the erroneous generation or application of a seed state.

Risk Factors

TBD

Examples

TBD

The application of a seed state that is known to an attacker can lead to a permanent compromise attack 2.

References

Note: A reference to related CWE or CAPEC article should be added when exists. Eg:

NOTOC

Category:OWASP ASDR Project Category:Cryptographic Vulnerability Category:Vulnerability