Magebean Logo Magebean
← Back to Baseline

MB-R115

HUMAN VERIFICATION REQUIRED ASVS 7.2.3 Reference session tokens have at least 128 bits of entropy

MB-C13 Application Behavior & Human Assurance Medium

If reference tokens are used to represent user sessions, they are unique and generated using a cryptographically secure pseudo-random number generator (CSPRNG) and possess at least 128 bits of entropy.