OWASPASVS 5.0 requirement
ASVS-V11.1.2 A cryptographic inventory is performed, maintained, regularly updated, and includes all cryptographic keys, algorithms, and certificates…
- Standard
- OWASP ASVS 5.0
- Chapter
- V11 Cryptography
- Section
- V11.1 Cryptographic Inventory and Documentation
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that a cryptographic inventory is performed, maintained, regularly updated, and includes all cryptographic keys, algorithms, and certificates used by the application. It must also document where keys can and cannot be used in the system, and the types of data that can and cannot be protected using the keys.