OWASPASVS 5.0 requirement

ASVS-V11.6.2 Approved cryptographic algorithms are used for key exchange (such as diffie-hellman) with a focus on ensuring that key exchange mechanisms…

L3 Published 2025 Official page ↗
Standard
OWASP ASVS 5.0
Chapter
V11 Cryptography
Section
V11.6 Public Key Cryptography
Level
L3 (requirement applies from this verification level up)

Requirement

Verify that approved cryptographic algorithms are used for key exchange (such as Diffie-Hellman) with a focus on ensuring that key exchange mechanisms use secure parameters. This will prevent attacks on the key establishment process which could lead to adversary-in-the-middle attacks or cryptographic breaks.