T1573.001

Sub-technique ESXi Linux macOS Network Devices Windows

Symmetric Cryptography

Description

Adversaries may employ a known symmetric encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Symmetric encryption algorithms use the same key for plaintext encryption and ciphertext decryption.

Common symmetric encryption algorithms include AES, DES, 3DES, Blowfish, and RC4.