Repository navigation
Disable HPKE ECDH NIST curves on Android - #134688
Merged
Merged
Conversation
vcsjones
changed the title
|
Azure Pipelines: Successfully started running 3 pipeline(s). 13 pipeline(s) were filtered out due to trigger conditions. There may be pipelines that require an authorized user to comment /azp run to run. |
Contributor
|
Tagging subscribers to this area: @bartonjs, @vcsjones, @dotnet/area-system-security |
bartonjs
approved these changes
Sep 25, 2026
Member
Author
|
/azp run runtime-android |
|
Azure Pipelines: Successfully started running 1 pipeline(s). |
Member
|
/ba-g Looks like an infra error on Windows-x86, this change only affects Android. |
Member
|
/backport to release/11.0 |
Contributor
|
Started backporting to |
2 of 4 tasks
artl93
pushed a commit
that referenced
this pull request
Oct 1, 2026
Backport of #134688 to release/11.0 /cc @bartonjs @vcsjones ## Customer Impact - [ ] Customer reported - [X] Found internally The HPKE KEMs based on EC-DiffieHellman with a NIST curve (as opposed to x25519) cannot import decapsulation keys on Android because the provider does not support importing non-x25519 private keys without the public key precomputed. The most recent build of Android has added native HPKE support, and they've omitted the ECDH-with-NIST-curve KEMs, so rather than try to work around the behavior, we'll just report them as not supported on Android. ## Regression - [ ] Yes - [X] No The HPKE class is new for .NET 11, first release in 11-RC2. ## Testing The existing tests were already reporting this, but the failures got missed at checkin because Build Analysis did not include the results of the Android run (false pass). ## Risk Low. New feature with nothing yet depending on it. Co-authored-by: Kevin Jones <kevin@vcsjones.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Android HPKE tests are failing because the Android implementations of
ECDiffieHellmancannot recoverQfromdeasily.X25519DiffieHellmansupports this, so it remains enabled.