I’m using the MLKit SDK on my iOS Application. I ran a dynamic security scan and it identifies that MLKit uses MD5 hashing functions which have been deprecated since iOS 13.

Specifically, the scan identifies that CC_MD5 methods are being called for the following functions.

-[MLKITx_GNSStreamProviderImpl outputStreamToBuffer:capacity:]
-[MLKITx_GNSStreamProviderImpl outputStreamToMemory]
-[MLKITx_CCTClearcutCounters initWithClock:]

AND

-[MLKITx_CCTLogContext hashForFilePath]

The names suggests that these functions are not being used for encryption or for security. Does anyone know if this indeed the case? Or is there a security concern here and MLKit isn’t secure to use?

Thanks in advance!