OWASPASVS 5.0 requirement
ASVS-V6.5.3 Lookup secrets, out-of-band authentication code, and time-based one-time password seeds, are generated using a cryptographically secure…
- Standard
- OWASP ASVS 5.0
- Chapter
- V6 Authentication
- Section
- V6.5 General Multi-factor authentication requirements
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that lookup secrets, out-of-band authentication code, and time-based one-time password seeds, are generated using a Cryptographically Secure Pseudorandom Number Generator (CSPRNG) to avoid predictable values.