Skip to content

Enable native PKCS8 and tests for composite PQC on Windows - #136743

Open
PranavSenthilnathan wants to merge 1 commit into
mainfrom
ps-composite-windows-algorithms
Open

PranavSenthilnathan wants to merge 1 commit into
mainfrom
ps-composite-windows-algorithms

Conversation

@PranavSenthilnathan

Copy link
Copy Markdown
Member

Composites are widely supported on Windows, so enable those tests. In addition, native PKCS8 export works, so use that instead of managed PKCS8 wrapping.

Remove redundant composite BCrypt/NCrypt test probes and encrypted-export exclusions. Exercise encrypted-only export and use native CNG PKCS8 export, matching ML-DSA. Preserve per-algorithm support checks and accept native cryptographic exception subclasses for denied PKCS8 exports.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
Successfully started running 3 pipeline(s).
12 pipeline(s) were filtered out due to trigger conditions.
There may be pipelines that require an authorized user to comment /azp run to run.

@dotnet-policy-service

Copy link
Copy Markdown
Contributor

Tagging subscribers to this area: @bartonjs, @vcsjones, @dotnet/area-system-security
See info in area-owners.md if you want to be subscribed.

@vcsjones

Copy link
Copy Markdown
Member

Composites are widely supported on Windows

I think only certain rings have that. Even now I still notice that some versions of Windows don’t support ML-KEM PKCS#8 properly, let alone composite versions of it.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants