OWASPASVS 5.0 requirement
ASVS-V11.3.4 Nonces, initialization vectors, and other single-use numbers are not used for more than one encryption key and data-element pair.
- Standard
- OWASP ASVS 5.0
- Chapter
- V11 Cryptography
- Section
- V11.3 Encryption Algorithms
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that nonces, initialization vectors, and other single-use numbers are not used for more than one encryption key and data-element pair. The method of generation must be appropriate for the algorithm being used.