Insecure or obsolete cryptographic algorithms can be cracked by an attacker using a modest amount of resources. In terms of encryption algorithms, this means that an attacker can succeed in converting encrypted text back into the original plain text without having to know any additional information, such as the cryptographic key. If insecure cryptographic algorithms are used, attackers may undermine the cryptographic protection and thereby access sensitive information within the respective organisation. Even if only secure (e.g. certified) products are used in an organisation, communication can still become insecure. This is the case, for example, if a communication partner uses cryptographic procedures that do not correspond to the state of the art.
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)