OWASPASVS 5.0 requirement
ASVS-V13.3.3 All cryptographic operations are performed using an isolated security module (such as a vault or hardware security module) to securely…
- Standard
- OWASP ASVS 5.0
- Chapter
- V13 Configuration
- Section
- V13.3 Secret Management
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that all cryptographic operations are performed using an isolated security module (such as a vault or hardware security module) to securely manage and protect key material from exposure outside of the security module.