HomeiOS DevelopmentMLKit iOS SDK Makes use of Damaged Cryptography API (MD5)

MLKit iOS SDK Makes use of Damaged Cryptography API (MD5)

May 1, 2024

I am utilizing the MLKit SDK on my iOS Software. I ran a dynamic safety scan and it identifies that MLKit makes use of MD5 hashing capabilities which have been deprecated since iOS 13.

Particularly, the scan identifies that CC_MD5 strategies are being known as for the next capabilities.

-[MLKITx_GNSStreamProviderImpl outputStreamToBuffer:capacity:]
-[MLKITx_GNSStreamProviderImpl outputStreamToMemory]
-[MLKITx_CCTClearcutCounters initWithClock:]

AND

-[MLKITx_CCTLogContext hashForFilePath]

The names means that these capabilities usually are not getting used for encryption or for safety. Does anybody know if this certainly the case? Or is there a safety concern right here and MLKit is not safe to make use of?

Thanks upfront!