This isn't a very good article, and, in general, OWASP is a pretty poor source for cryptography topics.