Skip to content

[release/11.0] Support private scalar-only imports on iOS - #134702

Open
github-actions[bot] wants to merge 1 commit into
release/11.0from
backport/pr-134682-to-release/11.0
Open

github-actions[bot] wants to merge 1 commit into
release/11.0from
backport/pr-134682-to-release/11.0

Conversation

@github-actions

@github-actions github-actions Bot commented Sep 26, 2026 •

Copy link
Copy Markdown
Contributor

Backport of #134682 to release/11.0

/cc @vcsjones

Customer Impact

  • Customer reported
  • Found internally

The HPKE functionality that was added to .NET 11 depends on EC-DH being able to import the private key without the public key. This was never implemented for iOS-like platforms, so this implements it.

Regression

  • Yes
  • No

Testing

Previously disabled tests are enabled and pass on iOS-like platforms.

Risk

Low. This code replaces a PlatformNotSupportedException path with a working implementation. Other code paths are unchanged, so we are only changing a path that was guaranteed to fail to one that has a functional implementation.

On iOS / tvOS / MacCatalyst, importing an EC key with only `d` would fail because it was not implemented. Previously it was not implemented because CryptoKit was not available to the platform. But now it is, so lets implement it.

This matters for HPKE - right now most integration tests for HPKE are failing because HPKE depends on being able to import only the private scalar. This fixes all HPKE tests on mobile Apple platforms.
@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
Successfully started running 3 pipeline(s).
13 pipeline(s) were filtered out due to trigger conditions.
There may be pipelines that require an authorized user to comment /azp run to run.

@vcsjones
vcsjones requested a review from bartonjs September 26, 2026 12:28
@vcsjones vcsjones self-assigned this Sep 26, 2026
@vcsjones vcsjones added this to the 11.0.0 milestone Sep 26, 2026
@dotnet-policy-service

Copy link
Copy Markdown
Contributor

Tagging subscribers to this area: @bartonjs, @vcsjones, @dotnet/area-system-security
See info in area-owners.md if you want to be subscribed.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant