WIN-8.4.4-02 — Use only ECCG recommended crypto algorithms
If a wallet instance is a web application, it shall only use the cryptographic algorithms recommended in the ECCG’s Agreed Cryptographic Mechanisms document [2].
| Property | Value |
|---|---|
| Section | 8.4.4 WebApp |
| Owner | platform |
Mapped Controls
| Control | Title |
|---|---|
| SID-CRYPTO-01 | PKCS#11 HSM Key Protection |
| SID-CRYPTO-04 | COSE Sign1 and mDOC Cryptography |
| SID-CRYPTO-05 | Secure Random Number Generation |
Source: ENISA – Security Requirements for European Digital Identity Wallets v0.5