OWASPASVS 5.0 requirement
ASVS-V11.2.4 All cryptographic operations are constant-time, with no 'short-circuit' operations in comparisons, calculations, or returns, to avoid…
- Standard
- OWASP ASVS 5.0
- Chapter
- V11 Cryptography
- Section
- V11.2 Secure Cryptography Implementation
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that all cryptographic operations are constant-time, with no 'short-circuit' operations in comparisons, calculations, or returns, to avoid leaking information.