Randomly generated IVs and keys should be used for Crypto calls
Impact area
Security
Severity
High
Affected element
Apex Class
Rule ID
SF-0022
Impact
Hard-wiring cryptographic key values greatly compromises the security of encrypted data.
Remediation
Use random seeds for your cryptographic operations.
Time to fix
120 min
References
This rule is linked to Common Weakness Enumeration CWE-311 Missing Encryption of Sensitive Data.
What's here