Home / Vulnerability Database / Swift : Insufficient number of iterations
Swift

Swift : Insufficient number of iterations

Overview

The password-based key derivation function uses too few iterations.

The key derivation function (KDF) generates one or more secret keys based on a secret value (master key, password or passphrase) using a pseudorandom function. Salt values ​​and a number of iterations are also used as parameters. A sufficient number of iterations provides the necessary stability of the algorithm. If the number of iterations is low, the possibility of attack increases, because an attacker can use “rainbow tables” to reverse the initial values ​​of hashed passwords.

Sensitive Data Exposure vulnerabilities take the third place in the “OWASP Top 10 2017” web-application vulnerabilities ranking.

MEDIUM

DerScanner Severity Score

Do you want to fix Swift : Insufficient number of iterations in your application?

See also

Swift

Swift : Nill password

Swift

Swift : Hardcoded salt

Swift

Swift : Undocumented feature: special account