Broken Cipher (ARCH8112)
Key kotlin.security.broken-cipher · Severity error · Category security · CWE CWE-327
Flags Cipher.getInstance with DES, 3DES (DESede), RC4 or Blowfish.
Incorrect
Section titled “Incorrect”Cipher.getInstance("DES/CBC/PKCS5Padding")Correct
Section titled “Correct”Cipher.getInstance("AES/GCM/NoPadding")Use AES-GCM (or ChaCha20-Poly1305).