Skip to content

Conversation

@vcsjones
Copy link
Member

@vcsjones vcsjones commented Oct 3, 2025

Backport of #120366 to release/10.0

/cc @bartonjs

Customer Impact

  • Customer reported
  • Found internally

This is test-only reaction to a change in Windows. Tests started failing in Windows because a Windows Update caused RSA with a 384-bit modulus to fail.

Regression

  • Yes
  • No

Testing

This is test only change. Verified failing tests started passing again.

Risk

None. Test-only change.

Copilot AI review requested due to automatic review settings October 3, 2025 19:48
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR backports a fix to detect RSA-384 support dynamically on platforms rather than relying on hardcoded Windows version checks. The change responds to a Windows Update that caused RSA with 384-bit modulus operations to fail, breaking existing tests.

Key changes:

  • Replaces static Windows version-based RSA-384 support detection with dynamic runtime testing
  • Centralizes RSA-384 support detection in a shared PlatformSupport class
  • Updates all RSA provider test classes to use the new centralized detection method

Reviewed Changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated no comments.

File Description
src/libraries/Common/tests/System/Security/Cryptography/PlatformSupport.cs Adds new IsRSA384Supported property with dynamic detection logic and test RSA-384 key parameters
src/libraries/System.Security.Cryptography/tests/DefaultRSAProvider.cs Replaces hardcoded Windows version check with centralized platform support detection
src/libraries/System.Security.Cryptography.Csp/tests/RSACryptoServiceProviderProvider.cs Updates from hardcoded true to use centralized platform support detection
src/libraries/System.Security.Cryptography.Cng/tests/RSACngProvider.cs Replaces hardcoded Windows version check with centralized platform support detection

@dotnet-policy-service
Copy link
Contributor

Tagging subscribers to this area: @dotnet/area-system-security, @bartonjs, @vcsjones
See info in area-owners.md if you want to be subscribed.

@vcsjones vcsjones requested a review from bartonjs October 3, 2025 19:52
@vcsjones vcsjones added this to the 10.0.0 milestone Oct 3, 2025
@bartonjs bartonjs requested a review from artl93 October 3, 2025 21:46
@bartonjs
Copy link
Member

bartonjs commented Oct 3, 2025

@artl93 Test-only change

Copy link
Member

@artl93 artl93 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yup - test only change.

@artl93 artl93 added the Servicing-approved Approved for servicing release label Oct 3, 2025
@artl93 artl93 merged commit 72afd43 into dotnet:release/10.0 Oct 3, 2025
88 of 92 checks passed
@vcsjones vcsjones deleted the backport-120366-to-release/10.0 branch October 3, 2025 22:06
@vcsjones vcsjones added the test-enhancement Improvements of test source code label Oct 6, 2025
@github-actions github-actions bot locked and limited conversation to collaborators Nov 6, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

area-System.Security Servicing-approved Approved for servicing release test-enhancement Improvements of test source code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants