OWASPASVS 5.0 requirement
ASVS-V6.7.2 The challenge nonce is at least 64 bits in length, and statistically unique or unique over the lifetime of the cryptographic device.
- Standard
- OWASP ASVS 5.0
- Chapter
- V6 Authentication
- Section
- V6.7 Cryptographic authentication mechanism
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that the challenge nonce is at least 64 bits in length, and statistically unique or unique over the lifetime of the cryptographic device.