Skip to content

Commit 63eea77

Browse files
wittjoe1elarlang
authored andcommitted
Update 0x92-Appendix-C_Cryptography.md
fix linking from Req. 6.2.9 to 11.2.3
1 parent ae1c93d commit 63eea77

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

5.0/en/0x92-Appendix-C_Cryptography.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -104,7 +104,7 @@ Notes:
104104

105105
* All encrypted messages must be authenticated. For ANY use of CBC mode there MUST be an associated hashing MAC algorithm to validate the message. In general, this MUST be applied in the Encrypt-Then-Hash method (but TLS 1.2 uses Hash-Then-Encrypt instead). If this cannot be guaranteed, then CBC MUST NOT be used. The only application where encryption without a MAC algorithm is allowed is disk encryption.
106106
* If CBC is used, it shall be guaranteed that the verification of the padding is performed in constant time.
107-
* When using CCM-8, the MAC tag only has 64 bits of security. This does not conform to requirement 6.2.9 which requires at least 128 bits of security.
107+
* When using CCM-8, the MAC tag only has 64 bits of security. This does not conform to requirement 11.2.3 which requires at least 128 bits of security.
108108
* Disk encryption is considered out of scope for the ASVS. Therefore this appendix does not list any approved method for disk encryption. For this usage, encryption without authentication is usually accepted and the XTS, XEX and LRW modes are typically used.
109109

110110
### Key Wrapping

0 commit comments

Comments
 (0)