371 – Use GCM Padding with AES

Summary

AES symmetric encryption should be used only with GCM padding.

Description

This GCM padding mechanism is a secure option when working with symmetric encryption. GCM is well-suited for modern cryptographic requirements and is widely adopted in various security protocols and applications where the combination of encryption and authentication is required.

Supported In

Advanced: True

References

• CAPEC-20. Encryption brute forcing
• HIPAA-164_312_a_2_iv. Encryption and decryption (addressable)
• HITRUST-10_g. Key management
• ISO27002-8_24. Use of cryptography
• IEC62443-DC-4_3. Use of cryptography
• ISO27001-8_24. Use of cryptography

Last updated

2024/01/18