OWASPASVS 5.0 requirement
ASVS-V11.4.3 Hash functions used in digital signatures, as part of data authentication or data integrity are collision resistant and have appropriate…
- Standard
- OWASP ASVS 5.0
- Chapter
- V11 Cryptography
- Section
- V11.4 Hashing and Hash-based Functions
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that hash functions used in digital signatures, as part of data authentication or data integrity are collision resistant and have appropriate bit-lengths. If collision resistance is required, the output length must be at least 256 bits. If only resistance to second pre-image attacks is required, the output length must be at least 128 bits.