Randomly generated IVs and keys should be used for Crypto calls

Impact area

Security

Severity

High

Affected element

Apex Class

Rule ID

SF-0022

Impact

Hard-wiring cryptographic key values greatly compromises the security of encrypted data.


Remediation

Use random seeds for your cryptographic operations.

Time to fix

120 min

References

This rule is linked to Common Weakness Enumeration CWE-311 Missing Encryption of Sensitive Data.




Last modified on Oct 13, 2020