OWASPASVS 5.0 requirement
ASVS-V11.3.5 Any combination of an encryption algorithm and a mac algorithm is operating in encrypt-then-mac mode.
- Standard
- OWASP ASVS 5.0
- Chapter
- V11 Cryptography
- Section
- V11.3 Encryption Algorithms
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that any combination of an encryption algorithm and a MAC algorithm is operating in encrypt-then-MAC mode.