Asvs 2515 tag change

[elarlang]

This Pull Request relates to issue #2515

[elarlang]

You can recheck all mapping changes, but...

@randomstuff - please check, is it suitable mapping

• https://asvs.dev/mapping_v4.0.3.html#v4.0.3-6.2.3

@tghosth - please check, are those suitable mappings:

• https://asvs.dev/mapping_v4.0.3.html#v4.0.3-1.9.2
• https://asvs.dev/mapping_v4.0.3.html#v4.0.3-12.3.6

If no feedback for tomorrow, I'm going to merge it in to move further.

[randomstuff]

6.6.3 [ADDED, SPLIT FROM 6.2.5] Verify that cryptographic systems avoid the use of disallowed hash functions, such as MD5, SHA-1, or any other insecure hash functions, for any cryptographic purpose.

is technically not really split from v4 6.2.3:

6.2.3 Verify that encryption initialization vector, cipher configuration, and block modes are configured securely using the latest advice.

The former is about hash functions which is not really covered by v4 6.2.3.

[elarlang]

6.6.3 [ADDED, SPLIT FROM 6.2.5] Verify that cryptographic systems avoid the use of disallowed hash functions, such as MD5, SHA-1, or any other insecure hash functions, for any cryptographic purpose.

is technically not really split from v4 6.2.3:

6.2.3 Verify that encryption initialization vector, cipher configuration, and block modes are configured securely using the latest advice.

The former is about hash functions which is not really covered by v4 6.2.3.

I think here is some misread, typo or other misunderstanding in place.

v4.0.3-6.2.3 got deleted, as it is covered by v5.0.be-6.5.1, v5.0.be-6.5.2, v5.0.be-6.6.3.

Probbaly v5.0.be-6.5.1 can be removed from this list.

[elarlang]

I merged it in, because it contains changes to many requirements and it may cause content conflicts for other PR's.

If there is some incorrect mapping in place, please open a separate issue or PR to address that.

[jmanico]

I say 6.2.3 be augmented to include hashes and drop 6.6.3. 6.6.3 is out of line with ASVS philosophy and it’s not critical based on other requirements, especially if we enhance 6.2.3.