-
Notifications
You must be signed in to change notification settings - Fork 6.1k
Document DSA removal from macOS in .NET 11 #50971
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
Co-authored-by: gewarren <[email protected]>
Updated recommendations for migrating away from DSA algorithm and clarified affected APIs.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
This PR documents the removal of DSA (Digital Signature Algorithm) support from macOS in .NET 11 Preview 1. Apple deprecated the SecurityTransforms library that provided the implementation, which only supported weak DSA-1024 with SHA-1 and never supported key generation.
Key Changes
- Added comprehensive breaking change documentation for DSA removal from macOS
- Updated the .NET 11 breaking changes index to include new Cryptography section
- Added navigation entry in the table of contents
- Updated unsupported APIs list with DSA-related APIs for macOS
Reviewed changes
Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| docs/core/compatibility/cryptography/11/dsa-removed-macos.md | New breaking change document detailing DSA removal, affected APIs, and migration guidance to EC-DSA |
| docs/core/compatibility/11.md | Added Cryptography section with reference to DSA removal document |
| docs/core/compatibility/toc.yml | Added Cryptography navigation entry under .NET 11 breaking changes |
| docs/core/compatibility/unsupported-apis.md | Added five DSA-related API entries for macOS platform with .NET 11+ footnote |
Co-authored-by: Copilot <[email protected]>
BillWagner
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This LGTM.
Let's ![]()
DSA (Digital Signature Algorithm) support has been removed from macOS in .NET 11 Preview 1. Apple deprecated the SecurityTransforms library that provided the implementation, which only supported weak DSA-1024 with SHA-1 and never supported key generation.
Changes
New breaking change document:
docs/core/compatibility/cryptography/11.0/dsa-removed-macos.mdPlatformNotSupportedExceptionthrown by DSA APIs on macOSDSA.Create()→ECDsa.Create()Index updates: Added Cryptography section to
docs/core/compatibility/11.mdTOC updates: Added navigation entry in
docs/core/compatibility/toc.ymlAffected APIs
System.Security.Cryptography.DSA.Create(all overloads)System.Security.Cryptography.DSACryptoServiceProvider(all constructors)System.Security.Cryptography.X509Certificates.DSACertificateExtensions.*(GetDSAPrivateKey, GetDSAPublicKey, CopyWithPrivateKey)iOS, tvOS, and MacCatalyst never supported DSA and remain unaffected.
Original prompt
✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.
Internal previews