Handle disabled algorithms on Azure Linux #106698
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
Tagging subscribers to this area: @dotnet/area-system-security, @bartonjs, @vcsjones |
bartonjs
reviewed
Aug 21, 2024
...ries/Common/tests/System/Security/Cryptography/AlgorithmImplementations/RSA/KeyGeneration.cs
Show resolved
Hide resolved
bartonjs
approved these changes
Aug 21, 2024
This was referenced Aug 26, 2024
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This pull request reacts to more changes in Azure Linux.
While SCOSSL does support ChaCha20-Poly1305, Azure Linux disables it:
https://github.com/microsoft/azurelinux/blob/027873ec537e7cf30f7d724c9dc1ad02098752b7/SPECS/openssl/openssl.spec#L170
Azure Linux with SymCrypt-OpenSSL does not support explicit EC curves. Unlike other platforms like Apple, SCOSSL allows importing and exporting explicit curve keys, rather they only fail at use time. For this, we introduce a new provider property that keeps track of how explicit EC curves fail.
Azure Linux does not support generating small RSA keys.
Contributes to #106489