objc-cryptographic-security-audit

Auditing Objective-C code for cryptographic vulnerabilities involves scanning source files to detect weak algorithms, hardcoded secrets, and insecure random number generation. The scan produces a summarized list of findings with prioritized remediation patterns.

Common cryptographic security anti-patterns in Objective-C include using weak algorithms like MD5, SHA1, and DES, alongside hardcoded keys or IVs. Code is also vulnerable if it uses insecure random number generation or exposes timing attack vectors.

Yes, you need the ripgrep tool installed to scan Objective-C source files for weak algorithms. The Skill requires `rg` (ripgrep) to perform efficient searching across directories to detect cryptographic anti-patterns.

Identified cryptographic vulnerabilities are prioritized using a P0 through P3 triage system during a code review. This prioritization helps address critical security issues first, providing clear guidance on remediation order.

The best way to fix hardcoded cryptographic keys is to apply concrete fix patterns and best practices provided by the audit. The scan output offers specific examples for remediation to ensure robust authentication and encryption.