Test case 2015

Deprecated test case

This version contains mistakes, making it deprecated. Deprecated test cases should not be used for new work. However, They remain in the SARD as a reference to redo previous work. The latest version of this test case is available here.

Old Test Case ID: 57
Type: source code
State: bad
Author: SecureSoftware
Status: deprecated
Language: C
Submission Date: 02 Nov 2005

Description

Not using a a random initialization vector with Cipher Block Chaining (CBC)
Mode causes algorithms to be susceptible to dictionary attacks. (from TCCLASP-5_5_22_10-C)

Flaws

CWE-329 Generation of Predictable IV with CBC Mode

Have any comments on this test case? Please, send us an email.