CWE-339 - Small Seed Space in PRNG
CWE-339
- Abstraction:
- Variant
- Structure:
- Simple
- Status:
- Draft
- Weakness Name
Small Seed Space in PRNG
- Description
A Pseudo-Random Number Generator (PRNG) uses a relatively small seed space, which makes it more susceptible to brute force attacks.
PRNGs are entirely deterministic once seeded, so it should be extremely difficult to guess the seed. If an attacker can collect the outputs of a PRNG and then brute force the seed by trying every possibility to see which seed matches the observed output, then the attacker will know the output of any subsequent calls to the PRNG. A small seed space implies that the attacker will have far fewer possible values to try to exhaust all possibilities.
- Common Consequences
Scope: Other
Impact: Varies by Context
- Related Weaknesses
- Release Date:
- 2006-07-19
- Latest Modification Date:
- 2023-10-26
Free security scan for your website