OWASPASVS 5.0 requirement

ASVS-V11.2.5 All cryptographic modules fail securely, and errors are handled in a way that does not enable vulnerabilities, such as padding oracle…

L3 Published 2025 Official page ↗

Standard: OWASP ASVS 5.0
Chapter: V11 Cryptography
Section: V11.2 Secure Cryptography Implementation
Level: L3 (requirement applies from this verification level up)

Requirement

Verify that all cryptographic modules fail securely, and errors are handled in a way that does not enable vulnerabilities, such as Padding Oracle attacks.