How Giant Data Leaks Happen - Understanding Cryptographic Failures (OWASP Number 2 for 2021)

This article provides an overview of OWASP's "Cryptographic Failures" category, defining sensitive data and common failures (data not protected or protected with insufficient cryptography), examples of weak algorithms and poor practices (reused salts, guessable keys), and recommendations such as using vetted libraries, strong algorithms, key rotation, and automated management to reduce cryptographic risks.