ラベル: area-System.Security

dotnet/runtimeにマージされたPull RequestをAIで日本語要約

ラベル一覧へ戻る

ラベル: area-System.Security の Pull Request の一覧を表示します。上から新しい順に表示されています。

  1. #136229 [release/11.0] Source code updates from dotnet/dotnet
  2. #136167 [release/8.0] Reset October OOB package generation for November servicing
  3. #135731 Merging internal commits for release/8.0
  4. #135727 Merging internal commits for release/8.0
  5. #136119 Guard EncryptedXml_DecryptDocument_MaxCount_Default with RemoteExecutor.IsSupported
  6. #135733 Merging internal commits for release/8.0
  7. #135728 Merging internal commits for release/9.0
  8. #135911 Remove support for BigInteger in generated ASN types
  9. #135885 Fix PEM parsing resumption for empty labels
  10. #135549 Add OpenSSL v4 fallback for FreeBSD
  11. #135743 EnvelopedCms.Decode should not run attribute-merge.
  12. #135741 Improve SignedCms and SignedXml processing
  13. #135662 [manual] Merge release/9.0-staging into release/9.0
  14. #135436 [release/10.0] Fix Duplicate ownership state machine under concurrency for NCrypt handles
  15. #135534 [release/10.0] OpenSSL 4 support
  16. #135454 [release/8.0-staging] Fix Duplicate ownership state machine under concurrency for NCrypt handles
  17. #135437 [release/9.0-staging] Fix Duplicate ownership state machine under concurrency for NCrypt handles
  18. #135062 Disable PreHash tests on AZL4 and fix external-mu on AZL4
  19. #134607 [release/11.0] X25519: Handle zero peer keys on downlevel Windows platforms
  20. #134702 [release/11.0] Support private scalar-only imports on iOS
  21. #134809 [release/11.0] Disable HPKE ECDH NIST curves on Android
  22. #134058 [libs] Include pthread.h where pthread_once is used
  23. #134868 Use CryptoKit for recovering public key from private EC keys on macOS
  24. #134688 Disable HPKE ECDH NIST curves on Android
  25. #134682 Support private scalar-only imports on iOS
  26. #134447 Provide System.Security.Cryptography.Cose package readme
  27. #134535 X25519: Handle zero peer keys on downlevel Windows platforms
  28. #134461 [release/8.0-staging] Make TestKeyRing.CreateECDsa resilient to transient macOS OSStatus -50 failures
  29. #134443 [release/11.0-rc2] Managed HPKE
  30. #134442 [release/11.0] Managed HPKE
  31. #133804 Managed HPKE
  32. #134340 Fix typo from occured tooccurred
  33. #134289 [release/11.0] Add Composite ML-KEM certificate key accessors
  34. #134310 [release/11.0] KEM support for EnvelopedCms
  35. #133046 KEM support for EnvelopedCms
  36. #134165 [release/11.0] Add Composite ML-KEM Windows implementation
  37. #134164 [release/11.0] Add managed Composite ML-KEM implementation
  38. #134259 Add Composite ML-KEM certificate key accessors
  39. #134163 [release/11.0] Add Composite ML-KEM base APIs
  40. #134162 [release/11.0] Expose Composite ML-DSA CNG identifiers
  41. #133763 Don't use IgnoreRootRevocationUnknown when processing intermediate CA re-key certificates
  42. #134096 [release/9.0-staging] Disable RSA SHA1/384 signature tests on Android
  43. #134070 [release/8.0-staging] Disable RSA SHA1/384 signature tests on Android
  44. #132687 Add Composite ML-KEM Windows implementation
  45. #133212 Expand cryptography instruction scope
  46. #133254 [release/11.0] Fix EC public key export for provider keys
  47. #133250 [release/10.0] Improve PemEncoding.TryFind perf with degenerate inputs
  48. #133233 [release/10.0] [Android] Disable X509 name-constraint violation tests on Android
  49. #133249 [release/11.0] Improve PemEncoding.TryFind perf with degenerate inputs
  50. #133205 Fix EC public key export for provider keys
  51. #133137 Improve PemEncoding.TryFind perf with degenerate inputs
  52. #131398 Add regression test for expired self-signed trusted chain (#48794)
  53. #132639 Improve exception for large keys with CNG HKDF
  54. #132903 [release/11.0] Gate Composite ML-DSA CNG tests on NCrypt support
  55. #132904 [release/11.0] Normalize X509Chain App/Cert policies across OSes
  56. #132348 Normalize X509Chain App/Cert policies across OSes
  57. #132854 Gate Composite ML-DSA CNG tests on NCrypt support
  58. #132659 Add managed Composite ML-KEM implementation
  59. #132351 Fix X509 reference leak in SslStream extra chain certificates on Unix
  60. #132440 Add Composite ML-KEM base APIs
  61. #132512 [release/10.0] Fix IsSupported tests for ML-KEM
  62. #132477 [release/11.0-rc1] Implement AES-KW
  63. #132498 Fix some AES-KWP tests
  64. #132353 Expose Composite ML-DSA CNG identifiers
  65. #132349 Implement AES-KW
  66. #132203 [release/10.0] Disable timing out EncryptedXml encoded-DTD tests
  67. #132252 [release/10.0] Make TestKeyRing.CreateECDsa resilient to transient macOS OSStatus -50 failures
  68. #131783 Replace SHA-1/RSA-1024 test data with SHA-256/RSA-2048 equivalents
  69. #132118 [release/9.0-staging] Disable timing out EncryptedXml encoded-DTD tests
  70. #132119 [release/8.0-staging] Disable timing out EncryptedXml encoded-DTD tests
  71. #131968 Remove unused OpenSSL Interop
  72. #131955 Disable timing out EncryptedXml encoded-DTD tests
  73. #131964 Tweak Copilot Instructions for S.S.Cryptography
  74. #131630 Improve Apple CryptoKit performance for AesGcm and ChaCha20Poly1305
  75. #131751 Fix IsSupported unit test for Android's X25519 implementation
  76. #131445 Enable ML-DSA CMS tests on .NET Framework
  77. #131469 [ci-scan-feedback] Route platform-specific crypto-config failures to loop-in
  78. #131211 [release/9.0-staging] Reduce EncryptedXml encoded DTD test workload
  79. #131214 [release/8.0-staging] Reduce EncryptedXml encoded DTD test workload
  80. #131424 Feature-detect KMAC key size limits
  81. #131295 Require ML-DSA keys match the signature algorithm OID in SignedCms
  82. #131242 Make AiaCompletionHasLimits handle Windows variance
  83. #130969 Compare full HMAC against full SignatureValue in SignedXml.CheckSignedInfo
  84. #131091 Reduce EncryptedXml encoded DTD test workload
  85. #131006 Add System.Security.Cryptography Copilot instructions
  86. #130973 Align CoseKey async verification with synchronous validation
  87. #130875 Load the duplicate attribute PFX under a lock
  88. #130724 Merging internal commits for release/8.0
  89. #130555 [Android] Add missing JNI exception checks across crypto PAL
  90. #130722 Merging internal commits for release/9.0
  91. #130810 Normalize GetNameInfo under malformed SANs
  92. #130804 Fix Duplicate ownership state machine under concurrency for NCrypt handles
  93. #130795 Fix EC/DSA key generation cache under concurrency
  94. #130456 Improve Linux AIA fetching
  95. #130053 Add CompositeMLDsa CNG (NCrypt)
  96. #130705 Apply a number of mitigations to System.Security.Cryptography.Xml
  97. #130737 Fix IsSupported tests for ML-KEM
  98. #129924 Consolidate RSA tests into S.S.C.
  99. #130269 Improve Certificate Policy tests
  100. #128777 [Android] Add missing JNI exception checks in crypto PAL
  101. #126887 Explain why RSA PKCS1 implicit rejection isn't used
  102. #129639 Add X25519 to Microsoft.Bcl.Cryptography
  103. #129996 Cache AES one-shot cipher handles
  104. #130136 Reenable disabled ML-DSA PKCS8 export tests
  105. #129921 Improve AES-KWP for Windows
  106. #129911 AES-KWP Performance Improvements for Apple
  107. #129612 BCrypt Composite ML-DSA
  108. #129865 [release/10.0] Fix blob type in CopyWithPrivateKey for ML-DSA
  109. #129552 Consolidate EC tests into S.S.C.
  110. #129839 Fix blob type in CopyWithPrivateKey for ML-DSA
  111. #129565 Remove SafeEcKeyHandle
  112. #128984 [release/10.0] [Android] Handle X509ChainContext creation failures
  113. #129770 Implement KeySizeInBytes on AesGcm and AesCcm.
  114. #129765 Obsolete AsnEncodedData.RawData.set
  115. #129623 Clean up S.S.AccessControl
  116. #129394 Fix OpenSSL X509Chain time validity depending on process time zone
  117. #129320 Move DSA tests into System.Security.Cryptography
  118. #129477 Implement support for loading multiple providers into a single context
  119. #129446 Fix OSSL_STORE_INFO leak
  120. #129435 Keep OSSL_LIB_CTX handles alive forever
  121. #129370 Delete PlatformDetection.IsMariner
  122. #129367 Add ActiveIssue for all named key tests to mitigate invalid memory access
  123. #129338 Some X25519 fixes for OpenSSL key handling
  124. #129330 Fix if that should have been an ifdef
  125. #127190 Prefer using non-deprecated EC OSSL APIs where possible
  126. #129129 Implement X25519 for Android
  127. #129033 Never attempt to process an RSA 16K key on Android
  128. #128892 [Android] Disable X509 name-constraint violation tests on Android
  129. #128948 Skip 32-bit time_t openssl detection on linux-bionic arm
  130. #128917 Remove Swift ObjC classes from Apple crypto native shim
  131. #128651 [Android] Handle X509ChainContext creation failures
  132. #128874 Change ValidateDer to iterative evaluation
  133. #128820 Guard crypto XML XSLT tests on dynamic code support
  134. #128747 [Android] Clear pending JNI exceptions in pal_rsa.c to avoid CheckJNI aborts
  135. #128629 [Android] Fix X509Store cleanup
  136. #128005 [release/10.0] Fix EncodeUnsignedInteger for test DSA signer
  137. #128493 [Android] Remove unnecessary X509Chain memory leak test
  138. #128385 [release/10.0] Release Android X509 chain certificate GREFs
  139. #128086 X25519DiffieHellman agreement with byte-based public keys
  140. #128213 [release/8.0] Disable crypto.xml package generation
  141. #128115 Fix doubling of rental for PKCS#8 exports in PQC and X25519
  142. #127999 Fix CS9361 stackalloc unsafe context in X25519DiffieHellmanCng
  143. #127979 Fix EncodeUnsignedInteger for test DSA signer
  144. #127924 Implement X25519DiffieHellmanCng
  145. #127826 Add scalar FixedTimeEquals overload
  146. #127625 [release/9.0-staging] Add an in-memory cache for CRLs on Linux
  147. #127574 [release/10.0] Add an in-memory cache for CRLs on Linux
  148. #127626 [release/8.0-staging] Add an in-memory cache for CRLs on Linux
  149. #127618 Fix ChaCha20Poly1305 IsSupported test on Azure Linux 4
  150. #127534 X25519DiffieHellmanOpenSsl
  151. #127248 Implement X25519DiffieHellman
  152. #127192 Remove RSA guard for OSSL
  153. #127093 Throw CryptographicException instead of NullReferenceException when URI attribute is missing in EncryptedXml
  154. #127029 Remove unused HAVE_EVP_MAC macro in native crypto PAL
  155. #120769 Support EVP_MAC for HMAC
  156. #126957 Apply mitigations to System.Security.Cryptography.Xml components
  157. #126900 Add AddRegisteredId to SubjectAlternativeNameBuilder
  158. #126897 Merging internal commits for release/9.0
  159. #126898 Merging internal commits for release/8.0
  160. #126034 Remove deprecated OpenSSL RSA APIs
  161. #126513 Change Pkcs12SafeContentsBag decoding from recursive to iterative
  162. #126481 [minipal] Add getentropy() fallback for platforms without getrandom()
  163. #126267 Disable CrlBuilderTests.DsaNotDirectlySupported on Android
  164. #126095 Fix OverflowException in COSE decoder for oversized integer header labels
  165. #125834 Stabilize ML-DSA X.509 PKIs with published RFC 9881.
  166. #125956 CngProperty constructor with ReadOnlySpan<byte> overload
  167. #125910 Fix intermittent SystemTrustCertificateWithCustomRootTrust CI failure
  168. #125854 Move more things away from PointerMemoryManager
  169. #125909 Make TestKeyRing.CreateECDsa resilient to transient macOS OSStatus -50 failures
  170. #125925 Fix CrlDiskCacheRecovers test flakiness: OuterLoop, longer timeout, retries
  171. #125911 Fix flaky NonPowerOfTwoKeySizeOaepRoundtrip test with retry on transient CryptographicException
  172. #125749 Stabilize ML-KEM APIs and remove Experimental attribute
  173. #125687 Allow binding to OpenSSL 4 from portable builds
  174. #125681 More reduction of PointerMemoryManager
  175. #125528 Use ref struct key loaders
  176. #125470 Enable the crypto shim to build against OpenSSL 4.0-alpha1 headers
  177. #125389 ref struct ASN.1 Decoder type generation
  178. #125290 Replace AsnValueReader with ValueAsnReader and remove internal type
  179. #125346 Use ValueAsnReader in more places where it is easy to do so
  180. #125254 Implement ValueAsnReader
  181. #124524 Obsolete Encrypt / Decrypt with fOAEP
  182. #125142 Remove dead Windows 7 conditions and inline CheckKeyConsistency in PfxFormatTests
  183. #124856 Fix x509-store for illumos
  184. #124480 Fix FromBase64Transform.TransformFinalBlock to consistently reset state
  185. #124617 Fix nondeterministic test failure for X509CertificateLoader
  186. #123036 [release/10.0] Fix EC-DSA / EC-DH PEM key loading with PKCS#8 key load attributes
  187. #117256 Use OpenSSL implementation of AES Key Wrap with Padding on Linux
  188. #124411 Fix the type of exception thrown when decoding bad headers
  189. #124485 Fix thread safety in SafeEvpPKeyHandle.DuplicateHandle
  190. #124292 Make GetGetDotNetCert clone the certificate for reliability
  191. #124312 Revert "[automated] Merge branch 'release/8.0' => 'release/8.0-staging'"
  192. #123562 Add an in-memory cache for CRLs on Linux
  193. #124236 Merging internal commits for release/9.0
  194. #124237 Merging internal commits for release/8.0
  195. #124013 FreeBSD: Add suffix numbering for OpenSSL3.5
  196. #123721 Add AppContext switch for SignedInfo maximum number of references.
  197. #123581 Remove some Apple handling from OpenSSL native shim
  198. #123636 Skip crypto tests requiring elevation when not elevated
  199. #122789 Cleanup __builtin_available where platform is now guaranteed on Apple platforms
  200. #123106 Update to draft 14 of Composite ML-DSA
  201. #122744 Fix build compilation with OpenSSL 4.0-dev.
  202. #120640 Improve code coverage for System.Security.Cryptography.Xml
  203. #122997 Fix EC-DSA / EC-DH PEM key loading with PKCS#8 key load attributes
  204. #122813 Assume hash handles are always reusable in HashProviderCng.
  205. #122877 Update cryptography tests for Windows 7 removal.
  206. #122805 Fix FromBase64Transform buffer sizing and output buffer handling
  207. #122816 Remove managed implementation from SP800-108 on Windows
  208. #122825 Fix trailing data handling with CertificateRevocationListBuilder.LoadPem.
  209. #122812 Remove use of BCryptDeriveKeyPBKDF2.
  210. #122769 Fix file descriptor leak