<PackageReference Include="Microsoft.Bcl.Cryptography" Version="11.0.0-rc.2.26504.105" />

---

API Differences between 11.0.0-rc.2.26504.105 and 11.0.0-preview.2.26159.112

237 Additions 0 Removals

System.Security.Cryptography

• public sealed class AesGcm : IDisposable
  • public int KeySizeInBytes { get; }
• public abstract class CompositeMLKem : IDisposable
  • public CompositeMLKemAlgorithm Algorithm { get; }
  • protected CompositeMLKem(CompositeMLKemAlgorithm algorithm)
  • public static CompositeMLKem GenerateKey(CompositeMLKemAlgorithm algorithm)
  • public static CompositeMLKem ImportDecapsulationKey(CompositeMLKemAlgorithm algorithm, byte[] source)
  • public static CompositeMLKem ImportDecapsulationKey(CompositeMLKemAlgorithm algorithm, ReadOnlySpan<byte> source)
  • public static CompositeMLKem ImportEncapsulationKey(CompositeMLKemAlgorithm algorithm, byte[] source)
  • public static CompositeMLKem ImportEncapsulationKey(CompositeMLKemAlgorithm algorithm, ReadOnlySpan<byte> source)
  • public static CompositeMLKem ImportEncryptedPkcs8PrivateKey(string password, byte[] source)
  • public static CompositeMLKem ImportEncryptedPkcs8PrivateKey(ReadOnlySpan<char> password, ReadOnlySpan<byte> source)
  • public static CompositeMLKem ImportEncryptedPkcs8PrivateKey(ReadOnlySpan<byte> passwordBytes, ReadOnlySpan<byte> source)
  • public static CompositeMLKem ImportFromEncryptedPem(string source, string password)
  • public static CompositeMLKem ImportFromEncryptedPem(ReadOnlySpan<char> source, ReadOnlySpan<char> password)
  • public static CompositeMLKem ImportFromEncryptedPem(string source, byte[] passwordBytes)
  • public static CompositeMLKem ImportFromEncryptedPem(ReadOnlySpan<char> source, ReadOnlySpan<byte> passwordBytes)
  • public static CompositeMLKem ImportFromPem(string source)
  • public static CompositeMLKem ImportFromPem(ReadOnlySpan<char> source)
  • public static CompositeMLKem ImportPkcs8PrivateKey(byte[] source)
  • public static CompositeMLKem ImportPkcs8PrivateKey(ReadOnlySpan<byte> source)
  • public static CompositeMLKem ImportSubjectPublicKeyInfo(byte[] source)
  • public static CompositeMLKem ImportSubjectPublicKeyInfo(ReadOnlySpan<byte> source)
  • public static bool IsAlgorithmSupported(CompositeMLKemAlgorithm algorithm)
  • public byte[] Decapsulate(byte[] ciphertext)
  • public void Decapsulate(ReadOnlySpan<byte> ciphertext, Span<byte> sharedSecret)
  • protected abstract void DecapsulateCore(ReadOnlySpan<byte> ciphertext, Span<byte> sharedSecret)
  • public void Dispose()
  • protected virtual void Dispose(bool disposing)
  • public void Encapsulate(out byte ciphertext, out byte sharedSecret)
  • public void Encapsulate(Span<byte> ciphertext, Span<byte> sharedSecret)
  • protected abstract void EncapsulateCore(Span<byte> ciphertext, Span<byte> sharedSecret)
  • public byte[] ExportDecapsulationKey()
  • public int ExportDecapsulationKey(Span<byte> destination)
  • protected abstract int ExportDecapsulationKeyCore(Span<byte> destination)
  • public byte[] ExportEncapsulationKey()
  • public int ExportEncapsulationKey(Span<byte> destination)
  • protected abstract int ExportEncapsulationKeyCore(Span<byte> destination)
  • public byte[] ExportEncryptedPkcs8PrivateKey(string password, PbeParameters pbeParameters)
  • public byte[] ExportEncryptedPkcs8PrivateKey(ReadOnlySpan<char> password, PbeParameters pbeParameters)
  • public byte[] ExportEncryptedPkcs8PrivateKey(ReadOnlySpan<byte> passwordBytes, PbeParameters pbeParameters)
  • public string ExportEncryptedPkcs8PrivateKeyPem(string password, PbeParameters pbeParameters)
  • public string ExportEncryptedPkcs8PrivateKeyPem(ReadOnlySpan<char> password, PbeParameters pbeParameters)
  • public string ExportEncryptedPkcs8PrivateKeyPem(ReadOnlySpan<byte> passwordBytes, PbeParameters pbeParameters)
  • public byte[] ExportPkcs8PrivateKey()
  • public string ExportPkcs8PrivateKeyPem()
  • public byte[] ExportSubjectPublicKeyInfo()
  • public string ExportSubjectPublicKeyInfoPem()
  • public bool TryExportDecapsulationKey(Span<byte> destination, out int bytesWritten)
  • public bool TryExportEncapsulationKey(Span<byte> destination, out int bytesWritten)
  • public bool TryExportEncryptedPkcs8PrivateKey(string password, PbeParameters pbeParameters, Span<byte> destination, out int bytesWritten)
  • public bool TryExportEncryptedPkcs8PrivateKey(ReadOnlySpan<char> password, PbeParameters pbeParameters, Span<byte> destination, out int bytesWritten)
  • public bool TryExportEncryptedPkcs8PrivateKey(ReadOnlySpan<byte> passwordBytes, PbeParameters pbeParameters, Span<byte> destination, out int bytesWritten)
  • public bool TryExportPkcs8PrivateKey(Span<byte> destination, out int bytesWritten)
  • protected abstract bool TryExportPkcs8PrivateKeyCore(Span<byte> destination, out int bytesWritten)
  • public bool TryExportSubjectPublicKeyInfo(Span<byte> destination, out int bytesWritten)
• public sealed class CompositeMLKemAlgorithm : IEquatable<CompositeMLKemAlgorithm>
  • public static CompositeMLKemAlgorithm MLKem1024WithECDiffieHellmanBrainpoolP384r1 { get; }
  • public static CompositeMLKemAlgorithm MLKem1024WithECDiffieHellmanP384 { get; }
  • public static CompositeMLKemAlgorithm MLKem1024WithECDiffieHellmanP521 { get; }
  • public static CompositeMLKemAlgorithm MLKem1024WithRsaOaep3072 { get; }
  • public static CompositeMLKemAlgorithm MLKem1024WithX448 { get; }
  • public static CompositeMLKemAlgorithm MLKem768WithECDiffieHellmanBrainpoolP256r1 { get; }
  • public static CompositeMLKemAlgorithm MLKem768WithECDiffieHellmanP256 { get; }
  • public static CompositeMLKemAlgorithm MLKem768WithECDiffieHellmanP384 { get; }
  • public static CompositeMLKemAlgorithm MLKem768WithRsaOaep2048 { get; }
  • public static CompositeMLKemAlgorithm MLKem768WithRsaOaep3072 { get; }
  • public static CompositeMLKemAlgorithm MLKem768WithRsaOaep4096 { get; }
  • public static CompositeMLKemAlgorithm MLKem768WithX25519 { get; }
  • public int CiphertextSizeInBytes { get; }
  • public string Name { get; }
  • public int SharedSecretSizeInBytes { get; }
  • public static bool op_Equality(CompositeMLKemAlgorithm left, CompositeMLKemAlgorithm right)
  • public static bool op_Inequality(CompositeMLKemAlgorithm left, CompositeMLKemAlgorithm right)
  • public bool Equals(CompositeMLKemAlgorithm other)
• public sealed class CompositeMLKemCng : CompositeMLKem
  • public CompositeMLKemCng(CngKey key)
  • public CngKey GetKey()
• public abstract class Hpke : IDisposable
  • public HpkeSuite Suite { get; }
  • protected Hpke(HpkeSuite suite)
  • public static Hpke DeriveKey(HpkeSuite suite, byte[] ikm)
  • public static Hpke DeriveKey(HpkeSuite suite, ReadOnlySpan<byte> ikm)
  • public static Hpke GenerateKey(HpkeSuite suite)
  • public static Hpke ImportDecapsulationKey(HpkeSuite suite, byte[] source)
  • public static Hpke ImportDecapsulationKey(HpkeSuite suite, ReadOnlySpan<byte> source)
  • public static Hpke ImportEncapsulationKey(HpkeSuite suite, byte[] source)
  • public static Hpke ImportEncapsulationKey(HpkeSuite suite, ReadOnlySpan<byte> source)
  • public static bool IsSupported(HpkeSuite suite)
  • public HpkeRecipient CreatePskRecipient(ReadOnlySpan<byte> encapsulatedSecret, ReadOnlySpan<byte> psk, ReadOnlySpan<byte> pskId, ReadOnlySpan<byte> info = default)
  • public HpkeRecipient CreatePskRecipient(byte[] encapsulatedSecret, byte[] psk, byte[] pskId, byte[] info = null)
  • protected abstract HpkeRecipient CreatePskRecipientCore(ReadOnlySpan<byte> encapsulatedSecret, ReadOnlySpan<byte> info, ReadOnlySpan<byte> psk, ReadOnlySpan<byte> pskId)
  • public HpkeSender CreatePskSender(ReadOnlySpan<byte> psk, ReadOnlySpan<byte> pskId, out byte encapsulatedSecret, ReadOnlySpan<byte> info = default)
  • public HpkeSender CreatePskSender(byte[] psk, byte[] pskId, out byte encapsulatedSecret, byte[] info = null)
  • public HpkeSender CreatePskSender(ReadOnlySpan<byte> psk, ReadOnlySpan<byte> pskId, Span<byte> encapsulatedSecret, ReadOnlySpan<byte> info = default)
  • protected abstract HpkeSender CreatePskSenderCore(Span<byte> encapsulatedSecret, ReadOnlySpan<byte> info, ReadOnlySpan<byte> psk, ReadOnlySpan<byte> pskId)
  • public HpkeRecipient CreateRecipient(ReadOnlySpan<byte> encapsulatedSecret, ReadOnlySpan<byte> info = default)
  • public HpkeRecipient CreateRecipient(byte[] encapsulatedSecret, byte[] info = null)
  • protected abstract HpkeRecipient CreateRecipientCore(ReadOnlySpan<byte> encapsulatedSecret, ReadOnlySpan<byte> info)
  • public HpkeSender CreateSender(out byte encapsulatedSecret, ReadOnlySpan<byte> info = default)
  • public HpkeSender CreateSender(Span<byte> encapsulatedSecret, ReadOnlySpan<byte> info = default)
  • protected abstract HpkeSender CreateSenderCore(Span<byte> encapsulatedSecret, ReadOnlySpan<byte> info)
  • public void Dispose()
  • protected virtual void Dispose(bool disposing)
  • public byte[] ExportDecapsulationKey()
  • public void ExportDecapsulationKey(Span<byte> destination)
  • protected abstract void ExportDecapsulationKeyCore(Span<byte> destination)
  • public byte[] ExportEncapsulationKey()
  • public void ExportEncapsulationKey(Span<byte> destination)
  • protected abstract void ExportEncapsulationKeyCore(Span<byte> destination)
  • public byte[] Open(ReadOnlySpan<byte> encapsulatedSecret, ReadOnlySpan<byte> ciphertext, ReadOnlySpan<byte> associatedData = default, ReadOnlySpan<byte> info = default)
  • public byte[] Open(byte[] encapsulatedSecret, byte[] ciphertext, byte[] associatedData = null, byte[] info = null)
  • public void Open(ReadOnlySpan<byte> encapsulatedSecret, ReadOnlySpan<byte> ciphertext, Span<byte> plaintext, ReadOnlySpan<byte> associatedData = default, ReadOnlySpan<byte> info = default)
  • protected abstract void OpenCore(ReadOnlySpan<byte> encapsulatedSecret, ReadOnlySpan<byte> ciphertext, Span<byte> plaintext, ReadOnlySpan<byte> associatedData, ReadOnlySpan<byte> info)
  • public void Seal(ReadOnlySpan<byte> plaintext, out byte encapsulatedSecret, out byte ciphertext, ReadOnlySpan<byte> associatedData = default, ReadOnlySpan<byte> info = default)
  • public void Seal(byte[] plaintext, out byte encapsulatedSecret, out byte ciphertext, byte[] associatedData = null, byte[] info = null)
  • public void Seal(ReadOnlySpan<byte> plaintext, Span<byte> encapsulatedSecret, Span<byte> ciphertext, ReadOnlySpan<byte> associatedData = default, ReadOnlySpan<byte> info = default)
  • protected abstract void SealCore(ReadOnlySpan<byte> plaintext, Span<byte> encapsulatedSecret, Span<byte> ciphertext, ReadOnlySpan<byte> associatedData, ReadOnlySpan<byte> info)
• public enum HpkeAead
  • AES_128_GCM = 1
  • AES_256_GCM = 2
  • ChaCha20Poly1305 = 3
• public enum HpkeKdf
  • HKDF_SHA256 = 1
  • HKDF_SHA384 = 2
  • HKDF_SHA512 = 3
  • SHAKE128 = 16
  • SHAKE256 = 17
• public enum HpkeKem
  • DHKEM_P256_HKDF_SHA256 = 16
  • DHKEM_P384_HKDF_SHA384 = 17
  • DHKEM_P521_HKDF_SHA512 = 18
  • DHKEM_X25519_HKDF_SHA256 = 32
  • MLKEM_1024 = 66
  • MLKEM_512 = 64
  • MLKEM_768 = 65
  • MLKEM1024_P384 = 81
  • MLKEM768_P256 = 80
• public abstract class HpkeRecipient : IDisposable
  • public HpkeSuite Suite { get; }
  • protected HpkeRecipient(HpkeSuite suite)
  • public void Dispose()
  • protected virtual void Dispose(bool disposing)
  • public byte[] Export(ReadOnlySpan<byte> exporterContext, int length)
  • public byte[] Export(byte[] exporterContext, int length)
  • public void Export(ReadOnlySpan<byte> exporterContext, Span<byte> destination)
  • protected abstract void ExportCore(ReadOnlySpan<byte> exporterContext, Span<byte> destination)
  • public byte[] Open(ReadOnlySpan<byte> ciphertext, ReadOnlySpan<byte> associatedData = default)
  • public byte[] Open(byte[] ciphertext, byte[] associatedData = null)
  • public void Open(ReadOnlySpan<byte> ciphertext, Span<byte> plaintext, ReadOnlySpan<byte> associatedData = default)
  • protected abstract void OpenCore(ReadOnlySpan<byte> ciphertext, Span<byte> plaintext, ReadOnlySpan<byte> associatedData)
• public abstract class HpkeSender : IDisposable
  • public HpkeSuite Suite { get; }
  • protected HpkeSender(HpkeSuite suite)
  • public void Dispose()
  • protected virtual void Dispose(bool disposing)
  • public byte[] Export(ReadOnlySpan<byte> exporterContext, int length)
  • public byte[] Export(byte[] exporterContext, int length)
  • public void Export(ReadOnlySpan<byte> exporterContext, Span<byte> destination)
  • protected abstract void ExportCore(ReadOnlySpan<byte> exporterContext, Span<byte> destination)
  • public byte[] Seal(ReadOnlySpan<byte> plaintext, ReadOnlySpan<byte> associatedData = default)
  • public byte[] Seal(byte[] plaintext, byte[] associatedData = null)
  • public void Seal(ReadOnlySpan<byte> plaintext, Span<byte> ciphertext, ReadOnlySpan<byte> associatedData = default)
  • protected abstract void SealCore(ReadOnlySpan<byte> plaintext, Span<byte> ciphertext, ReadOnlySpan<byte> associatedData)
• public sealed class HpkeSuite : IEquatable<HpkeSuite>
  • public HpkeAead AeadAlgorithm { get; }
  • public int AeadTagSizeInBytes { get; }
  • public int DecapsulationKeySizeInBytes { get; }
  • public int EncapsulatedSecretSizeInBytes { get; }
  • public int EncapsulationKeySizeInBytes { get; }
  • public HpkeKdf KdfAlgorithm { get; }
  • public HpkeKem KemAlgorithm { get; }
  • public string Name { get; }
  • public HpkeSuite(HpkeKem kem, HpkeKdf kdf, HpkeAead aead)
  • public static bool op_Equality(HpkeSuite left, HpkeSuite right)
  • public static bool op_Inequality(HpkeSuite left, HpkeSuite right)
  • public bool Equals(HpkeSuite other)
  • public int GetCiphertextLength(int plaintextLength)
• public abstract class X25519DiffieHellman : IDisposable
  • public const int PrivateKeySizeInBytes = 32
  • public const int PublicKeySizeInBytes = 32
  • public const int SecretAgreementSizeInBytes = 32
  • public static bool IsSupported { get; }
  • protected X25519DiffieHellman()
  • public static X25519DiffieHellman GenerateKey()
  • public static X25519DiffieHellman ImportEncryptedPkcs8PrivateKey(ReadOnlySpan<byte> passwordBytes, ReadOnlySpan<byte> source)
  • public static X25519DiffieHellman ImportEncryptedPkcs8PrivateKey(ReadOnlySpan<char> password, ReadOnlySpan<byte> source)
  • public static X25519DiffieHellman ImportEncryptedPkcs8PrivateKey(string password, byte[] source)
  • public static X25519DiffieHellman ImportFromEncryptedPem(ReadOnlySpan<char> source, ReadOnlySpan<char> password)
  • public static X25519DiffieHellman ImportFromEncryptedPem(ReadOnlySpan<char> source, ReadOnlySpan<byte> passwordBytes)
  • public static X25519DiffieHellman ImportFromEncryptedPem(string source, string password)
  • public static X25519DiffieHellman ImportFromEncryptedPem(string source, byte[] passwordBytes)
  • public static X25519DiffieHellman ImportFromPem(ReadOnlySpan<char> source)
  • public static X25519DiffieHellman ImportFromPem(string source)
  • public static X25519DiffieHellman ImportPkcs8PrivateKey(ReadOnlySpan<byte> source)
  • public static X25519DiffieHellman ImportPkcs8PrivateKey(byte[] source)
  • public static X25519DiffieHellman ImportPrivateKey(byte[] source)
  • public static X25519DiffieHellman ImportPrivateKey(ReadOnlySpan<byte> source)
  • public static X25519DiffieHellman ImportPublicKey(byte[] source)
  • public static X25519DiffieHellman ImportPublicKey(ReadOnlySpan<byte> source)
  • public static X25519DiffieHellman ImportSubjectPublicKeyInfo(ReadOnlySpan<byte> source)
  • public static X25519DiffieHellman ImportSubjectPublicKeyInfo(byte[] source)
  • public byte[] DeriveRawSecretAgreement(X25519DiffieHellman otherParty)
  • public byte[] DeriveRawSecretAgreement(byte[] otherPartyPublicKey)
  • public void DeriveRawSecretAgreement(X25519DiffieHellman otherParty, Span<byte> destination)
  • public void DeriveRawSecretAgreement(ReadOnlySpan<byte> otherPartyPublicKey, Span<byte> destination)
  • protected abstract void DeriveRawSecretAgreementCore(X25519DiffieHellman otherParty, Span<byte> destination)
  • protected abstract void DeriveRawSecretAgreementCore(ReadOnlySpan<byte> otherPartyPublicKey, Span<byte> destination)
  • public void Dispose()
  • protected virtual void Dispose(bool disposing)
  • public byte[] ExportEncryptedPkcs8PrivateKey(ReadOnlySpan<byte> passwordBytes, PbeParameters pbeParameters)
  • public byte[] ExportEncryptedPkcs8PrivateKey(ReadOnlySpan<char> password, PbeParameters pbeParameters)
  • public byte[] ExportEncryptedPkcs8PrivateKey(string password, PbeParameters pbeParameters)
  • public string ExportEncryptedPkcs8PrivateKeyPem(ReadOnlySpan<byte> passwordBytes, PbeParameters pbeParameters)
  • public string ExportEncryptedPkcs8PrivateKeyPem(ReadOnlySpan<char> password, PbeParameters pbeParameters)
  • public string ExportEncryptedPkcs8PrivateKeyPem(string password, PbeParameters pbeParameters)
  • public byte[] ExportPkcs8PrivateKey()
  • public string ExportPkcs8PrivateKeyPem()
  • public byte[] ExportPrivateKey()
  • public void ExportPrivateKey(Span<byte> destination)
  • protected abstract void ExportPrivateKeyCore(Span<byte> destination)
  • public byte[] ExportPublicKey()
  • public void ExportPublicKey(Span<byte> destination)
  • protected abstract void ExportPublicKeyCore(Span<byte> destination)
  • public byte[] ExportSubjectPublicKeyInfo()
  • public string ExportSubjectPublicKeyInfoPem()
  • public bool TryExportEncryptedPkcs8PrivateKey(ReadOnlySpan<byte> passwordBytes, PbeParameters pbeParameters, Span<byte> destination, out int bytesWritten)
  • public bool TryExportEncryptedPkcs8PrivateKey(ReadOnlySpan<char> password, PbeParameters pbeParameters, Span<byte> destination, out int bytesWritten)
  • public bool TryExportEncryptedPkcs8PrivateKey(string password, PbeParameters pbeParameters, Span<byte> destination, out int bytesWritten)
  • public bool TryExportPkcs8PrivateKey(Span<byte> destination, out int bytesWritten)
  • protected abstract bool TryExportPkcs8PrivateKeyCore(Span<byte> destination, out int bytesWritten)
  • public bool TryExportSubjectPublicKeyInfo(Span<byte> destination, out int bytesWritten)
• public sealed class X25519DiffieHellmanCng : X25519DiffieHellman
  • public X25519DiffieHellmanCng(CngKey key)
  • public CngKey GetKey()

System.Security.Cryptography.X509Certificates

• public static class X509CertificateKeyAccessors
  • public static X509Certificate2 CopyWithPrivateKey(this X509Certificate2 certificate, CompositeMLKem privateKey)
  • public static CompositeMLKem GetCompositeMLKemPrivateKey(this X509Certificate2 certificate)
  • public static CompositeMLKem GetCompositeMLKemPublicKey(this X509Certificate2 certificate)