Weak KDF Iterations (ARCH8116)
Ce contenu n’est pas encore disponible dans votre langue.
Key kotlin.security.weak-kdf-iterations · Severity warning · Category security · CWE CWE-916
Flags PBEKeySpec with fewer than 100,000 iterations, or a bcrypt cost below 10.
Incorrect
Section titled “Incorrect”PBEKeySpec(pw, salt, 1000, 256)Correct
Section titled “Correct”PBEKeySpec(pw, salt, 210_000, 256)Use at least 210,000 PBKDF2 iterations (or Argon2id / bcrypt cost 12).