Weak KDF Iterations (ARCH9116)
Key swift.security.weak-kdf-iterations · Severity warning · Category security · CWE CWE-916
Flags CCKeyDerivationPBKDF with fewer than 100,000 rounds.
Incorrect
Section titled “Incorrect”CCKeyDerivationPBKDF(..., 1000, ...)Correct
Section titled “Correct”CCKeyDerivationPBKDF(..., 210_000, ...)Use at least 210,000 rounds, or Argon2id.