Create new IVs for every counter mode encryption operation

문서 > Datadog 보안 > Code Security > Static Code Analysis (SAST) > SAST 규칙 > Create new IVs for every counter mode encryption operation

이 페이지는 아직 영어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우 언제든지 연락주시기 바랍니다.

Metadata

ID: kotlin-security/no-iv-reuse

Language: Kotlin

Severity: Warning

Category: Security

CWE: 323

Description

This rule addresses the use of Initialization Vectors (IVs) in counter mode encryption. An Initialization Vector is a random number that is used as the starting point for encryption algorithms. It’s essential to generate fresh IVs for every encryption operation to ensure the output is not predictable, enhancing the overall security of the encryption process.

Using static or hard-coded IVs introduces a significant security risk. If an attacker knows the IV, they can predict the output of the encryption, making it much easier to break. The fundamental principle of cryptography is to keep all aspects of the encryption process as unpredictable as possible.

To adhere to this rule, always generate a fresh, random IV for each encryption operation. This ensures that even if an attacker manages to compromise one encryption operation, subsequent operations remain secure due to the unpredictability of the IVs.

Non-Compliant Code Examples

// Noncompliant - Using a static IV
class InsecureEncryption {
    fun encryptData(secretKey: String, data: ByteArray): ByteArray {
        // BAD: Hardcoded IV that will be reused for every encryption
        val staticIV = "staticIVvalue123".toByteArray()
        
        val cipher = Cipher.getInstance("AES/CCM/NoPadding")
        val key = SecretKeySpec(secretKey.toByteArray(), "AES")
        val paramSpec = CCMParameterSpec(128, staticIV)
        
        cipher.init(Cipher.ENCRYPT_MODE, key, paramSpec)
        return cipher.doFinal(data)
    }
}

Compliant Code Examples

// Compliant - Using a secure random IV
class SecureEncryption {
    fun encryptData(secretKey: String, data: ByteArray): ByteArray {
        // GOOD: Generate fresh random IV for each encryption
        val secureRandom = SecureRandom()
        val randomIV = ByteArray(12).apply {
            secureRandom.nextBytes(this)
        }
        
        val cipher = Cipher.getInstance("AES/CCM/NoPadding")
        val key = SecretKeySpec(secretKey.toByteArray(), "AES")
        val paramSpec = CCMParameterSpec(128, randomIV)
        
        cipher.init(Cipher.ENCRYPT_MODE, key, paramSpec)
        return cipher.doFinal(data)
    }
}