Page History

HARDCODED.AUTH

HARDCODED.KEY

HARDCODED.SALT

MISC.PWD.PLAIN

MISC.PWD.PLAINTRAN

Hardcoded Authentication

Hardcoded Crypto Key

Hardcoded Crypto Salt

Plaintext Storage of Password

Plaintext Transmission of Password

586

Partially supported: reports functions that read passwords from the user or that take a password as an argument instead of prompting the user as well as insecure password erasure

CERT C: Rec. MSC18-C

Checks for:

• Constant or predictable block cipher initialization vector
• Constant or predictable cipher key
• Sensitive heap memory not cleared before release
• Uncleared sensitive data in stack
• Unsafe standard encryption function

Rec. partially covered.