ECB Mode (ARCH9113)

Key swift.security.ecb-mode · Severity error · Category security · CWE CWE-327

Flags kCCOptionECBMode - ECB leaks plaintext patterns.

Incorrect

CCCrypt(..., CCOptions(kCCOptionECBMode), ...)

Correct

let sealed = try AES.GCM.seal(data, using: key)

Fix

Use an authenticated mode with a fresh nonce per message.