OWASPASVS 5.0 requirement
ASVS-V11.6.2 Approved cryptographic algorithms are used for key exchange (such as diffie-hellman) with a focus on ensuring that key exchange mechanisms…
- Standard
- OWASP ASVS 5.0
- Chapter
- V11 Cryptography
- Section
- V11.6 Public Key Cryptography
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that approved cryptographic algorithms are used for key exchange (such as Diffie-Hellman) with a focus on ensuring that key exchange mechanisms use secure parameters. This will prevent attacks on the key establishment process which could lead to adversary-in-the-middle attacks or cryptographic breaks.