Weak KDF Iterations (ARCH8116)
Esta página aún no está disponible en tu idioma.
Key kotlin.security.weak-kdf-iterations · Severity warning · Category security · CWE CWE-916
Flags PBEKeySpec with fewer than 100,000 iterations, or a bcrypt cost below 10.
Incorrect
Section titled “Incorrect”PBEKeySpec(pw, salt, 1000, 256)Correct
Section titled “Correct”PBEKeySpec(pw, salt, 210_000, 256)Use at least 210,000 PBKDF2 iterations (or Argon2id / bcrypt cost 12).