If an attacker manages to use a crypto module without authorisation, they may manipulate critical security parameters. As a consequence, the corresponding cryptographic methods will no longer provide for sufficient security. Moreover, an attacker may manipulate the crypto module in such a way that it works properly at first glance, but is actually in an insecure condition. This way, the attacker may remain undetected for an extended period of time and access a great deal of information that is critical to the organisation in question.