If an organisation uses crypto modules that are too complicated, for example, its users may dispense with them for the sake of convenience or practicality and transfer information in plain text instead. As a consequence, attackers may eavesdrop on the information transmitted.

Errors in operating crypto modules may also result in confidential information being intercepted by attackers—for example, if the information is transmitted in plain text because the plain text mode has been enabled accidentally.