OWASP / owasp-mastg

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).
https://mas.owasp.org/
Creative Commons Attribution Share Alike 4.0 International
11.74k stars 2.32k forks source link

MASVS 3.3: Config of crypto missing for iOS #923

Closed sushi2k closed 6 years ago

sushi2k commented 6 years ago

MASVS 3.3: The app uses cryptographic primitives that are appropriate for the particular use-case, configured with parameters that adhere to industry best practices.

See Android test case https://mobile-security.gitbook.io/mobile-security-testing-guide/android-testing-guide/0x05e-testing-cryptography

commjoen commented 6 years ago
  1. Update the Android section on the security provider given https://android-developers.googleblog.com/2016/06/security-crypto-provider-deprecated-in.html
  2. Update the Android section based on https://android-developers.googleblog.com/2018/03/cryptography-changes-in-android-p.html
  3. Update the Android section based on https://developer.android.com/about/versions/oreo/android-8.1
  4. Update the iOS section given:
commjoen commented 6 years ago

Next, take care of #922