Match each cryptographic or security control weakness on the left with its corresponding technical description on the right.
- Hardcoded Cryptographic KeyEmbedding secret symmetric keys directly within application code or compiled binaries.
- Deprecated/Weak Cipher SuiteUtilizing legacy algorithms with short key lengths or known structural flaws such as DES or RC4.
- Expired SSL/TLS CertificateFailing to renew a digital credential prior to its validity end date, causing clients to reject encrypted handshakes.
- Unsalted Password HashStoring password digests without unique random data, rendering them susceptible to precomputed rainbow table attacks.
Answer
Hardcoded Cryptographic Key matches embedding secret symmetric keys directly within application code; Deprecated/Weak Cipher Suite matches utilizing legacy algorithms with short key lengths or known structural flaws; Expired SSL/TLS Certificate matches failing to renew a digital credential prior to its validity end date; Unsalted Password Hash matches storing password digests without unique random data.
Each security control weakness aligns with its fundamental technical definition. Hardcoding keys puts secrets in binaries; legacy cipher suites rely on flawed algorithms like DES/RC4; expired certificates break the validity lifecycle in PKI; and unsalted hashes expose stored credentials to precomputed rainbow table lookups.
Step-by-Step Solution
Key Concept
Cryptographic and Security Control Weaknesses