IdTokens.SigningKeySecure

Is the signing key secure

This test determines whether the (asymmetric) signing key of the ID tokens is secure. The key must be at least 2048 bits for RSA or 160 bits for elliptic curve algorithms.

View source code on GitHub

Documents

This test is part of the following document(s):

• Financial-grade API Security Profile (FAPI) 1.0 – Part 1: Baseline (FAPI1Base), section 5.2.2 (must)

Back to the test case overview or the threat overview