OWASPASVS 5.0 requirement
ASVS-V11.6.1 Only approved cryptographic algorithms and modes of operation are used for key generation and seeding, and digital signature generation and…
- Standard
- OWASP ASVS 5.0
- Chapter
- V11 Cryptography
- Section
- V11.6 Public Key Cryptography
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that only approved cryptographic algorithms and modes of operation are used for key generation and seeding, and digital signature generation and verification. Key generation algorithms must not generate insecure keys vulnerable to known attacks, for example, RSA keys which are vulnerable to Fermat factorization.