{% extends 'core/Cryptographic Failures/cryptographic_failures.html' %} {% load static %} Title {% block inside-content %}

What are Cryptographic failures?

As the name suggests, this category will look at holes and lousy cryptography implementations, or lack thereof. Safely encrypted data are a welcomed layer of security that might save personal data if a website breach happens. We encrypt all kinds of data, such as passwords, personal user information, credit card numbers, telephone numbers, and other sensitive information. In this age of supercomputers cracking encrypted data is relatively easy, so demand for strong encryption techniques rises. Using new and tested encryption techniques is detrimental to avoiding data leaks. The things we want to avoid are:

Using clear text for data transfer in internet communications
Using old or weak cryptographic algorithms
Using or reusing default, weak cryptographic keys, and their improper handling and management
Encryption is not enforced, and receiver certificates are not validated
Use of deprecated hash functions and cryptographic padding methods

{% endblock %}