+V11.3 Encryption Algorithms
---+V11.3.1 Verify that insecure block modes (e.g., ECB) and weak padding schemes (e.g., PKCS#1 v1.5) are not …
---+V11.3.2 Verify that only approved ciphers and modes such as AES with GCM are used.
---+V11.3.3 Verify that encrypted data is protected against unauthorized modification preferably by using an …
---+V11.3.4 Verify that nonces, initialization vectors, and other single-use numbers are not used for more than …
---+V11.3.5 Verify that any combination of an encryption algorithm and a MAC algorithm is operating in …

V11.3 Encryption Algorithms

Authenticated encryption algorithms built on AES and CHACHA20 form the backbone of modern cryptographic practice.

1. Pārskats

Nosaukums Standarts
V11.3.1 Verify that insecure block modes (e.g., ECB) and weak padding schemes (e.g., PKCS#1 v1.5) are not …

Verify that insecure block modes (e.g., ECB) and weak padding schemes (e.g., PKCS#1 v1.5) are not used.

V11.3.2 Verify that only approved ciphers and modes such as AES with GCM are used.

Verify that only approved ciphers and modes such as AES with GCM are used.

V11.3.3 Verify that encrypted data is protected against unauthorized modification preferably by using an …

Verify that encrypted data is protected against unauthorized modification preferably by using an approved authenticated encryption method or by combining an approved encryption method with an approved MAC algorithm.

V11.3.4 Verify that nonces, initialization vectors, and other single-use numbers are not used for more than …

Verify that nonces, initialization vectors, and other single-use numbers are not used for more than one encryption key and data-element pair. The method of generation must be appropriate for the algorithm being used.

V11.3.5 Verify that any combination of an encryption algorithm and a MAC algorithm is operating in …

Verify that any combination of an encryption algorithm and a MAC algorithm is operating in encrypt-then-MAC mode.

1.1 Atsauces

1.2 Identificētās prasības

1.3 Saistītie tiesību akti

2. Identificētās prasības

Prasības
Avots Prasība

3. Saistītie tiesību akti

Tiesību akti
Avots Regulējums
  • OWASP -

    EN: Publications of the OWASP Foundation, https://owasp.org/. OWASP® is a registered trademark of the OWASP Foundation, Inc.; GRCA is not affiliated with, nor endorsed by, the OWASP Foundation. Only the versions published by OWASP are authoritative.

    DE: Veröffentlichungen der OWASP Foundation, https://owasp.org/. OWASP® ist eine eingetragene Marke der OWASP Foundation, Inc.; GRCA steht in keiner Verbindung zur OWASP Foundation und wird von ihr nicht unterstützt. Maßgeblich sind allein die von OWASP veröffentlichten Fassungen.