Public Key Cryptography
V11.6.1
Verify that only approved cryptographic algorithms and modes of operation are used for key generation and seeding, and digital signature generation and verification. Key generation algorithms must not generate insecure keys vulnerable to known attacks, for example, RSA keys which are vulnerable to Fermat factorization.
Required for Level 2 and 3
Related CAPEC™ Requirements
CAPEC™ (3.9): 112, 114, 145, 157, 20, 216, 218, 220, 233, 272, 39, 473, 594, 620, 68, 94, 97
V11.6.2
Verify that approved cryptographic algorithms are used for key exchange (such as Diffie-Hellman) with a focus on ensuring that key exchange mechanisms use secure parameters. This will prevent attacks on the key establishment process which could lead to adversary-in-the-middle attacks or cryptographic breaks.
Required for Level 3
Related CAPEC™ Requirements
CAPEC™ (3.9): 112, 114, 145, 157, 20, 216, 218, 220, 233, 272, 39, 473, 594, 620, 68, 94, 97
Disclaimer
Credit via OWASP ASVS.For more information visit: The OWASP ASVS Project or Github respository.. OWASP ASVS is under the Creative Commons Attribution-Share Alike v4.0 license.
