OWASPASVS 5.0 requirement
ASVS-V11.4.1 Only approved hash functions are used for general cryptographic use cases, including digital signatures, hmac, kdf, and random bit…
- Standard
- OWASP ASVS 5.0
- Chapter
- V11 Cryptography
- Section
- V11.4 Hashing and Hash-based Functions
- Level
- L1 (requirement applies from this verification level up)
Requirement
Verify that only approved hash functions are used for general cryptographic use cases, including digital signatures, HMAC, KDF, and random bit generation. Disallowed hash functions, such as MD5, must not be used for any cryptographic purpose.