Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')

Properties


name
Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')
definition
A protocol or its implementation supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties.

Neighbors

CWE-757 has no direct neighbors in this release.

Inferred Relationships

This page is experimental and may change significantly in future releases.

Related Countermeasure Techniques

No related defensive techniques in this release.

Related Weaknesses

Related Offensive Techniques

No related offensive techniques in this release.