Submission File: ES2606-acab2eba-new-incorrect-crypto-block-cipher-mode-selection.txt
ID: ES2606-acab2eba
SUBMISSION DATE: 2026-06-24 08:53:56
NAME: Incorrect mode of operation selection when using cryptographic block cipher primitives
DESCRIPTION:
Cryptographic block cipher primitives are generally able to operate in one
of several different modes. The block cipher AES as an example includes
ECB, CBC among numerous other modes of operation. Modes of operation may
fall into one of a number of broad categories (confidentiality-only,
authenticated encryption AEAD etc) which will significantly impact the
desired security properties of the ciphertext. Additionally, there are a
number of fine grain characteristics for each mode of operation. Using a
block cipher with an inappropriate mode of operation can result in one or
more security properties (confidentiality, integrity, authenticity) failing
critically. Such mistakes often lead to information disclosure, loss of
message integrity and other vulnerabilities.
For example, disk encryption modes are designed specifically for
block-oriented storage systems and should generally be restricted to those
use cases. Many other use cases require authenticated encryption modes,
such as AES-GCM or ChaCha20-Poly1305, to ensure both confidentiality and
integrity.
It is beyond the scope of the CWE to detail out guidance on specific mode
of operation usage, expert advice should be sought out when selecting modes
of operation.
Additionally, the highest level of abstraction should always be used which
greatly limits practitioner exposure to issues arising from incorrect mode
of operation selection.
Submission File: ES2606-acab2eba-new-incorrect-crypto-block-cipher-mode-selection.txt
ID: ES2606-acab2eba
SUBMISSION DATE: 2026-06-24 08:53:56
NAME: Incorrect mode of operation selection when using cryptographic block cipher primitives
DESCRIPTION:
Cryptographic block cipher primitives are generally able to operate in one
of several different modes. The block cipher AES as an example includes
ECB, CBC among numerous other modes of operation. Modes of operation may
fall into one of a number of broad categories (confidentiality-only,
authenticated encryption AEAD etc) which will significantly impact the
desired security properties of the ciphertext. Additionally, there are a
number of fine grain characteristics for each mode of operation. Using a
block cipher with an inappropriate mode of operation can result in one or
more security properties (confidentiality, integrity, authenticity) failing
critically. Such mistakes often lead to information disclosure, loss of
message integrity and other vulnerabilities.
For example, disk encryption modes are designed specifically for
block-oriented storage systems and should generally be restricted to those
use cases. Many other use cases require authenticated encryption modes,
such as AES-GCM or ChaCha20-Poly1305, to ensure both confidentiality and
integrity.
It is beyond the scope of the CWE to detail out guidance on specific mode
of operation usage, expert advice should be sought out when selecting modes
of operation.
Additionally, the highest level of abstraction should always be used which
greatly limits practitioner exposure to issues arising from incorrect mode
of operation selection.