Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

MITRE CWE

CWE ID 256, "Plaintext Storage of a Password"

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="c879d7cf-f092-4175-b05c-d9e238a00e11"><ac:plain-text-body><![CDATA[

[ISO/IEC TR 24772:2010

http://www.aitcnet.org/isai/]

"Insufficiently Protected Credentials [XYM]"

]]></ac:plain-text-body></ac:structured-macro>

Bibliography

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="22b726a44ce3e29b-6a89edc3-44b5432c-90fd96af-cfe06b6d06c8eb995f642abe"><ac:plain-text-body><![CDATA[

[SD:[API 2006

AA. Bibliography#API 06]]

Class java.security.MessageDigest

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="f18b4c586052c88c-f3ad4d9c-45f3415b-84fa9dc9-6dcfa410b4698a008a06af85"><ac:plain-text-body><![CDATA[

[SD:[API 2006

AA. Bibliography#API 06]]

Class java.lang.String

]]></ac:plain-text-body></ac:structured-macro>

http://www.javapractices.com/topic/TopicAction.do?Id=216

Passwords never in clear text

http://en.wikipedia.org/wiki/Salt_(cryptography) 

Salt (cryptography)

http://en.wikipedia.org/wiki/Cryptographic_hash_function 

Cryptographic hash function

http://nsa.gov/

 

...