Improper Handling of Insufficient Entropy in TRNG

True random number generators (TRNG) generally have a limited source of entropy and therefore can fail or block.

Soyutlama

Variant

Yapı

Simple

Sömürü İhtimali

Low

Problemi anla

Problem nedir?

True random number generators (TRNG) generally have a limited source of entropy and therefore can fail or block.

The rate at which true random numbers can be generated is limited. It is important that one uses them only when they are needed for security.

Kök neden

Yaşam döngüsü evresi

Yaşam döngüsü evresi

REALIZATION: This weakness is caused during implementation of an architectural security tactic.

Risk

DoS: Crash, Exit, or Restart

Etkilenen güvenlik alanları: Availability

A program may crash or block if it runs out of random numbers.

Savunma

Implementation

Detay

Rather than failing on a lack of random numbers, it is often preferable to wait for more numbers to be created.