I have cryptographic utility but no hardcoded password , everything is coming from configuration. But still Vera code open the flaws.

Here some pseudo code

string Encrypt(decryptedText, key, iv)

{

Rfc2898DeriveBytes secretKey = Rfc2898DeriveBytes (key , Encoding.UTF8.GetBytes(iv));

CreateEncryptor(secretKey .GetBytes(32), secretKey .GetBytes(16)))

{

// some code

return base64;

}

}

Nothing is hardcoded here but still Vera Code open the flaw here.

Please help me out.