MASVS-CRYPTO Refactoring (till 31.01.22)

[cpholguera]

Hello everybody,

as part of the refactoring process we decided to publish our draft of every section of the MASVS that we (@cpholguera, @TheDauntless and @sushi2k) worked on.

This is based on the MASVS category "V3: Cryptography Requirements" (MASVS Version 1.4.0): https://github.com/OWASP/owasp-masvs/blob/v1.4.0/Document/0x08-V3-Cryptography_Verification_Requirements.md

Here you can find a summary of the proposed new requirements (more details below):

In the following link we include a nice visualization as a diff spreadsheet including:

• Reason for removal/change.
• Idea behind the new requirement/formulation.
• More context thanks to related Test Cases.
• Filter in column F1 to see
  • the previous version only
  • the new version only
  • or the diff

MASVS-CRYPTO is open for comments bis the end of January 2022. Please comment directly in the Google Spreadsheet (you can comment on each of the cells) or in this GitHub Discussion.

MASVS-CRYPTO Refactoring Diff