CWE-1279: Cryptographic Operations are Run Before Supporting Units are Ready
Filter
Performing cryptographic operations without ensuring that the supporting inputs are ready to supply valid data may compromise the cryptographic result.
What the weakness is: CWE-1279 at MITRE. All weaknesses
Related attack patterns (CAPEC): 1
- CAPEC-97 Cryptanalysis Likelihood: Low · Severity: Very High
The attack patterns MITRE's CAPEC relates to CWE-1279, as MITRE names them. Credits.
Ask an AI about CWE-1279
Show the prompt
Explain CWE-1279: Cryptographic Operations are Run Before Supporting Units are Ready and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1279.html and https://cve.bz/cve/cwe/1279?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 5.4CVE-2025-29779EPSS 0.2%
Post-Quantum Secure Feldman's Verifiable Secret Sharing provides a Python implementation of Feldman's Verifiable Secret Sharing (VSS) scheme. In versions 0.8.0b2 and prior, the `secure_redundant_execution` function in feldman_vss.py attemp…
- 7.5CVE-2024-22473EPSS 0.4%
TRNG is used before initialization by ECDSA signing driver when exiting EM2/EM3 on Virtual Secure Vault (VSE) devices. This defect may allow Signature Spoofing by Key Recreation.This issue affects Gecko SDK through v4.4.0.
- 9.8CVE-2023-4489EPSS 0.5%
The first S0 encryption key is generated with an uninitialized PRNG in Z/IP Gateway products running Silicon Labs Z/IP Gateway SDK v7.18.3 and earlier. This makes the first S0 key generated at startup predictable, potentially allowing netw…