OWASPASVS 5.0 requirement

ASVS-V11.3.1 Insecure block modes (e.g., ecb) and weak padding schemes (e.g., pkcs#1 v1.5) are not used.

L1 Published 2025 Official page ↗
Standard
OWASP ASVS 5.0
Chapter
V11 Cryptography
Section
V11.3 Encryption Algorithms
Level
L1 (requirement applies from this verification level up)

Requirement

Verify that insecure block modes (e.g., ECB) and weak padding schemes (e.g., PKCS#1 v1.5) are not used.