Errors in the real world (2)

Implementation errors

• Weaknesses in crypto systems

• Not enough testing for security

Examples

• Data integrity hashes that are easily broken

• DES-based key management weakness

• Functional testing does not simulate attacks

Previous slide

Next slide

Back to first slide

View graphic version