[release/6.0-staging] Manually depad RSAES-PKCS1 on Apple OSes #98465
Conversation
bartonjs
added
Servicing-approved
|
Tagging subscribers to this area: @dotnet/area-system-security, @bartonjs, @vcsjones Issue DetailsManual backport of #97738 to release/6.0-staging Customer Impact
Apple macOS 14.3 and Apple iOS/iPadOS 17.3 have applied a variant of the OpenSSL 3.2 "implicit rejection" feature where rather than reporting a decryption failure for RSAEncryptionPadding.Pkcs1 they report success and return random data. As with the similar change on Linux, this change breaks routines which depend on the failure for correctness. Regression
Apple macOS 14.3 and Apple iOS/iPadOS 17.3 have made this change intentionally, but this manifests as a functional regression in .NET applications depending on the current behavior. TestingThis OS regression was caught by existing tests. New tests have also been added to verify the full reliability of the fix. RiskLow. The fix is in an area that we already have test coverage.
|
Manual backport of #97738 to release/6.0-staging
Customer Impact
Apple macOS 14.3 and Apple iOS/iPadOS 17.3 have applied a variant of the OpenSSL 3.2 "implicit rejection" feature where rather than reporting a decryption failure for RSAEncryptionPadding.Pkcs1 they report success and return random data. As with the similar change on Linux, this change breaks routines which depend on the failure for correctness.
Regression
Apple macOS 14.3 and Apple iOS/iPadOS 17.3 have made this change intentionally, but this manifests as a functional regression in .NET applications depending on the current behavior.
Testing
This OS regression was caught by existing tests. New tests have also been added to verify the full reliability of the fix.
Risk
Low. The fix is in an area that we already have test coverage.