CWE-323 (在加密中重用Nonce与密钥对) — Vulnerability Class 43

43 vulnerabilities classified as CWE-323 (在加密中重用Nonce与密钥对). AI Chinese analysis included.

CWE-323 represents a cryptographic weakness where developers improperly reuse nonces or key pairs in encryption operations, violating the fundamental principle that these values must be unique per session. This flaw is typically exploited by attackers who leverage the repeated cryptographic material to perform statistical analysis, recover plaintext messages, or forge valid authentication tokens. By observing patterns in ciphertexts generated with identical keys or nonces, adversaries can bypass security controls and gain unauthorized access to sensitive data. To prevent this vulnerability, developers must implement robust random number generators to create cryptographically secure, unique nonces for every encryption instance. Additionally, strict key management protocols should ensure that private keys are never reused across different contexts or sessions, thereby maintaining the integrity and confidentiality of the encrypted communication channel.

MITRE CWE Description

Nonces should be used for the present occasion and only once.

Common Consequences (1)

Access Control Bypass Protection Mechanism, Gain Privileges or Assume Identity

Potentially a replay attack, in which an attacker could send the same data twice, could be crafted if nonces are allowed to be reused. This could allow a user to send a message which masquerades as a valid message from a valid user.

Mitigations (2)

Implementation Refuse to reuse nonce values.

Implementation Use techniques such as requiring incrementing, time based and/or challenge response to assure uniqueness of nonces.

Examples (2)

This code takes a password, concatenates it with a nonce, then encrypts it before sending over a network:

void encryptAndSendPassword(char *password){ char *nonce = "bad"; ... char *data = (unsigned char*)malloc(20); int para_size = strlen(nonce) + strlen(password); char *paragraph = (char*)malloc(para_size); SHA1((const unsigned char*)paragraph,parsize,(unsigned char*)data); sendEncryptedData(data) }

Bad · C

This code sends a command to a remote server, using an encrypted password and nonce to prove the command is from a trusted party:

String command = new String("some command to execute"); MessageDigest nonce = MessageDigest.getInstance("SHA"); nonce.update(String.valueOf("bad nonce")); byte[] nonce = nonce.digest(); MessageDigest password = MessageDigest.getInstance("SHA"); password.update(nonce + "secretPassword"); byte[] digest = password.digest(); sendCommand(digest, command)

Bad · C++

CVE ID	Title	CVSS	Severity	Published
CVE-2023-28997	Nextcloud Desktop: Initialization vector reuse in E2EE allows malicious server admin to break, manipulate, access files — security-advisories	6.7	Medium	2023-04-04
CVE-2021-32791	Hardcoded static IV and AAD with a reused key in AES GCM encryption in mod_auth_openidc — mod_auth_openidc	5.9	Medium	2021-07-26
CVE-2020-1759	多款Red Hat产品安全特征问题漏洞 — ceph	6.4	Medium	2020-04-13
CVE-2019-7593	Metasys use of shared RSA key pairs — Metasys versions prior to 9.0	7.5	-	2019-08-20
CVE-2017-13088	WPA和WPA2 安全特征问题漏洞 — Wi-Fi Protected Access (WPA and WPA2)	5.3	-	2017-10-17
CVE-2017-13086	WPA和WPA2 安全特征问题漏洞 — Wi-Fi Protected Access (WPA and WPA2)	6.8	-	2017-10-17
CVE-2017-13084	WPA和WPA2 安全特征问题漏洞 — Wi-Fi Protected Access (WPA and WPA2)	6.8	-	2017-10-17
CVE-2017-13082	WPA和WPA2 安全特征问题漏洞 — Wi-Fi Protected Access (WPA and WPA2)	6.8	-	2017-10-17
CVE-2017-13081	WPA和WPA2 安全特征问题漏洞 — Wi-Fi Protected Access (WPA and WPA2)	5.3	-	2017-10-17
CVE-2017-13080	Intel PROSet/Wireless WiFi Software 安全特征问题漏洞 — Wi-Fi Protected Access (WPA and WPA2)	5.3	-	2017-10-17
CVE-2017-13079	WPA和WPA2 安全特征问题漏洞 — Wi-Fi Protected Access (WPA and WPA2)	5.3	-	2017-10-17
CVE-2017-13078	WPA和WPA2 安全特征问题漏洞 — Wi-Fi Protected Access (WPA and WPA2)	5.3	-	2017-10-17
CVE-2017-7902	多款Rockwell Automation产品安全漏洞 — Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400	9.8	-	2017-06-30

Vulnerabilities classified as CWE-323 (在加密中重用Nonce与密钥对) represent 43 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.