CWE-333

Improper Handling of Insufficient Entropy in TRNG

Variant

Draft

True random number generators (TRNG) generally have a limited source of entropy and therefore can fail or block.

The rate at which true random numbers can be generated is limited. It is important that one uses them only when they are needed for security.

Parent Weaknesses (ChildOf)

Scope

Availability

Impact

DoS: Crash, Exit, or Restart

Implementation

Rather than failing on a lack of random numbers, it is often preferable to wait for more numbers to be created.

Not Language-Specific

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.