{"action":"created","issue":{"url":"https://api.github.com/repos/dotnet/corefx/issues/32913","repository_url":"https://api.github.com/repos/dotnet/corefx","labels_url":"https://api.github.com/repos/dotnet/corefx/issues/32913/labels{/name}","comments_url":"https://api.github.com/repos/dotnet/corefx/issues/32913/comments","events_url":"https://api.github.com/repos/dotnet/corefx/issues/32913/events","html_url":"https://github.com/dotnet/corefx/issues/32913","id":372036072,"node_id":"MDU6SXNzdWUzNzIwMzYwNzI=","number":32913,"title":"EnvelopedCms.Decrypt fails when the CEK is encrypted with OAEP-SHA256","user":{"login":"bartonjs","id":10642668,"node_id":"MDQ6VXNlcjEwNjQyNjY4","avatar_url":"https://avatars3.githubusercontent.com/u/10642668?v=4","gravatar_id":"","url":"https://api.github.com/users/bartonjs","html_url":"https://github.com/bartonjs","followers_url":"https://api.github.com/users/bartonjs/followers","following_url":"https://api.github.com/users/bartonjs/following{/other_user}","gists_url":"https://api.github.com/users/bartonjs/gists{/gist_id}","starred_url":"https://api.github.com/users/bartonjs/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bartonjs/subscriptions","organizations_url":"https://api.github.com/users/bartonjs/orgs","repos_url":"https://api.github.com/users/bartonjs/repos","events_url":"https://api.github.com/users/bartonjs/events{/privacy}","received_events_url":"https://api.github.com/users/bartonjs/received_events","type":"User","site_admin":false},"labels":[{"id":163633782,"node_id":"MDU6TGFiZWwxNjM2MzM3ODI=","url":"https://api.github.com/repos/dotnet/corefx/labels/area-System.Security","name":"area-System.Security","color":"d4c5f9","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/dotnet/corefx/milestones/21","html_url":"https://github.com/dotnet/corefx/milestone/21","labels_url":"https://api.github.com/repos/dotnet/corefx/milestones/21/labels","id":3242632,"node_id":"MDk6TWlsZXN0b25lMzI0MjYzMg==","number":21,"title":"3.0","description":".NET Core 3.0, next major release after 2.1. See [official release dates](https://github.com/dotnet/core/blob/master/roadmap.md) for details.\r\n\r\nWe will move important issues from Future to 3.0 as the priorities and dates for next release become more clear.","creator":{"login":"karelz","id":5776068,"node_id":"MDQ6VXNlcjU3NzYwNjg=","avatar_url":"https://avatars2.githubusercontent.com/u/5776068?v=4","gravatar_id":"","url":"https://api.github.com/users/karelz","html_url":"https://github.com/karelz","followers_url":"https://api.github.com/users/karelz/followers","following_url":"https://api.github.com/users/karelz/following{/other_user}","gists_url":"https://api.github.com/users/karelz/gists{/gist_id}","starred_url":"https://api.github.com/users/karelz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/karelz/subscriptions","organizations_url":"https://api.github.com/users/karelz/orgs","repos_url":"https://api.github.com/users/karelz/repos","events_url":"https://api.github.com/users/karelz/events{/privacy}","received_events_url":"https://api.github.com/users/karelz/received_events","type":"User","site_admin":false},"open_issues":362,"closed_issues":4106,"state":"open","created_at":"2018-04-04T16:40:10Z","updated_at":"2019-01-01T20:58:36Z","due_on":"2019-03-31T07:00:00Z","closed_at":null},"comments":2,"created_at":"2018-10-19T16:50:45Z","updated_at":"2019-01-01T21:16:10Z","closed_at":null,"author_association":"MEMBER","body":"https://github.com/dotnet/corefx/blob/d33f8435461028ec131fcfd42232098aaf3e6ded/src/System.Security.Cryptography.Pkcs/src/Internal/Cryptography/Pal/AnyOS/ManagedPal.KeyTrans.cs#L88-L90 assumes that the OAEP OID means OAEP-SHA1, but it should instead decode the parameters.\r\n\r\nhttps://stackoverflow.com/questions/52460001/get-pem-from-p7p8-files-using-c-sharp/ includes pointers to existing documents which can decrypt correctly with .NET Framework (and .NET Core on Windows with an attached private key), but fail when decrypted by the managed PAL (non-Windows, or Windows with a detached private key)."},"comment":{"url":"https://api.github.com/repos/dotnet/corefx/issues/comments/450757417","html_url":"https://github.com/dotnet/corefx/issues/32913#issuecomment-450757417","issue_url":"https://api.github.com/repos/dotnet/corefx/issues/32913","id":450757417,"node_id":"MDEyOklzc3VlQ29tbWVudDQ1MDc1NzQxNw==","user":{"login":"vcsjones","id":361677,"node_id":"MDQ6VXNlcjM2MTY3Nw==","avatar_url":"https://avatars2.githubusercontent.com/u/361677?v=4","gravatar_id":"","url":"https://api.github.com/users/vcsjones","html_url":"https://github.com/vcsjones","followers_url":"https://api.github.com/users/vcsjones/followers","following_url":"https://api.github.com/users/vcsjones/following{/other_user}","gists_url":"https://api.github.com/users/vcsjones/gists{/gist_id}","starred_url":"https://api.github.com/users/vcsjones/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vcsjones/subscriptions","organizations_url":"https://api.github.com/users/vcsjones/orgs","repos_url":"https://api.github.com/users/vcsjones/repos","events_url":"https://api.github.com/users/vcsjones/events{/privacy}","received_events_url":"https://api.github.com/users/vcsjones/received_events","type":"User","site_admin":false},"created_at":"2019-01-01T21:16:10Z","updated_at":"2019-01-01T21:16:10Z","author_association":"COLLABORATOR","body":"@bartonjs I should have a PR for this done soon; I have the managed PAL working, now for Windows.\r\n\r\nShould we address encryption in this issue sonehow, or consider a new issue for that and address decryption only?\r\n\r\nAs it stands, encryption will always use SHA1 when using OAEP. "}}
{"actor":{"display_login":"vcsjones"}}