OWASPASVS 5.0 requirement
ASVS-V11.2.3 All cryptographic primitives utilize a minimum of 128-bits of security based on the algorithm, key size, and configuration.
- Standard
- OWASP ASVS 5.0
- Chapter
- V11 Cryptography
- Section
- V11.2 Secure Cryptography Implementation
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that all cryptographic primitives utilize a minimum of 128-bits of security based on the algorithm, key size, and configuration. For example, a 256-bit ECC key provides roughly 128 bits of security where RSA requires a 3072-bit key to achieve 128 bits of security.