This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Cornucopia - Ecommerce Website - CR 2
From OWASP
Revision as of 15:11, 21 January 2016 by Dariodf (talk | contribs) (Created page with "{{DISPLAYTITLE:<span style="padding:2px 5px 0px 5px;color:white;background:#a395ca;">Cornucopia - Ecommerce Website - CR 2</span>}} File:Cornucopia_-_Ecommerce_Website_CR_2....")
Suit: Cryptography
Card/Value: 2
Description:
Kyun can access data because it has been obfuscated rather than using an approved cryptographic function.
Technical Note:
There is no substitute for a proper, approved, cryptographic function where data needs to be protected at rest or in transit. Obfuscation is rarely the correct choice. Use standard-sapproved functions and consider all cryptographic management requirements (e.g. key creation, distribution, protection, replacement, retirement).
References:
OWASP SCP | OWASP ASVS | OWASP AppSensor | CAPEC | SAFECODE |
---|---|---|---|---|
105 | - | - | - | 21 |
133 | 29 | |||
135 |