Skip to content

Latest commit

 

History

History
59 lines (44 loc) · 2.2 KB

aescryptoserviceprovider-decryptor-provides-a-reusable-transform.md

File metadata and controls

59 lines (44 loc) · 2.2 KB
Raw

AesCryptoServiceProvider decryptor provides a reusable transform

Scope

Minor

Version Introduced

4.6.2

Source Analyzer Status

Investigating

Change Description

Starting with apps that target the .NET Framework 4.6.2, the xref:System.Security.Cryptography.AesCryptoServiceProvider decryptor provides a reusable transform. After a call to xref:System.Security.Cryptography.CryptoAPITransform.TransformFinalBlock(System.Byte[],System.Int32,System.Int32)?displayProperty=name, the transform is reinitialized and can be reused. For apps that target earlier versions of the .NET Framework, attempting to reuse the decryptor by calling xref:System.Security.Cryptography.CryptoAPITransform.TransformBlock(System.Byte[],System.Int32,System.Int32,System.Byte[],System.Int32)?displayProperty=name after a call to xref:System.Security.Cryptography.CryptoAPITransform.TransformFinalBlock(System.Byte[],System.Int32,System.Int32)?displayProperty=name throws a xref:System.Security.Cryptography.CryptographicException or produces corrupted data.

  • Quirked
  • Build-time break

Recommended Action

The impact of this change should be minimal, since this is the expected behavior.

Applications that depend on the previous behavior can opt out of it using it by adding the following configuration setting to the <runtime> section of the application's configuration file:

<runtime>
   <AppContextSwitchOverrides value="Switch.System.Security.Cryptography.AesCryptoServiceProvider.DontCorrectlyResetDecryptor=true"/>
</runtime>

In addition, applications that target a previous version of the .NET Framework but are running under a version of the .NET Framework starting with .NET Framework 4.6.2 can opt in to it by adding the following configuration setting to the <runtime> section of the application's configuration file:

<runtime>
   <AppContextSwitchOverrides value="Switch.System.Security.Cryptography.AesCryptoServiceProvider.DontCorrectlyResetDecryptor=false"/>
</runtime>

Affected APIs

  • M:System.Security.Cryptography.AesCryptoServiceProvider.CreateDecryptor

Category

Core