cryptographic subsystem vulnerability