CWE-326
Overview
- CWE ID
- 326
- CWE Name
- Inadequate Encryption Strength
- CWE Abstraction
- Class
- CWE structure
- Simple
- CWE Status
- Draft
Description
The software stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
Extended Description
A weak encryption scheme can be subjected to brute force attacks that have a reasonable chance of succeeding using current attack methods and resources.
Related CWEs
| CWE ID | View ID | Nature | Ordinal |
|---|---|---|---|
| 693 | 1000 | ChildOf | Primary |