Test failure: System.Security.Cryptography.Cose.Tests.CoseMultiSignMessageTests_Sign.SignVerify

[VincentBu]

Failed in: runtime-coreclr crossgen2 20260425.1

Failed tests:

net11.0-osx-Release-x64-TestReadyToRun_Release-OSX.15.Amd64.Open
- System.Security.Cryptography.Cose.Tests.CoseMultiSignMessageTests_Sign.SignVerify

Error message:

Interop+AppleCrypto+AppleCFErrorCryptographicException : The operation couldn’t be completed. (OSStatus error -50 - Unsupported key type: 42 (converted value: 42)

Stack trace:

   at Interop.AppleCrypto.CreateDataKey(ReadOnlySpan`1 keyData, PAL_KeyAlgorithm keyAlgorithm, Boolean isPublic)
   at System.Security.Cryptography.RSAImplementation.RSAAppleCrypto.ImportKey(RSAParameters parameters)
   at System.Security.Cryptography.RSAImplementation.RSAAppleCrypto.ImportParameters(RSAParameters parameters)
   at System.Security.Cryptography.RSA.Create(RSAParameters parameters)
   at System.Security.Cryptography.Cose.Tests.TestKeyRing.CreateRSA(Boolean includePrivateKey) in /_/src/libraries/System.Security.Cryptography.Cose/tests/TestKeyRing.cs:line 93
   at System.Security.Cryptography.Cose.Tests.TestKeyRing.get_RSAKey() in /_/src/libraries/System.Security.Cryptography.Cose/tests/TestKeyRing.cs:line 32
   at System.Security.Cryptography.Cose.Tests.CoseTestHelpers.GetKeyHashPaddingTriplet[T](CoseAlgorithm algorithm, Boolean useNonPrivateKey) in /_/src/libraries/System.Security.Cryptography.Cose/tests/CoseTestHelpers.cs:line 522
   at System.Security.Cryptography.Cose.Tests.CoseMessageTests_Sign`1.GetKeyHashAlgorithmPaddingQuadruplet(Boolean useNonPrivateKey)+MoveNext() in /_/src/libraries/System.Security.Cryptography.Cose/tests/CoseMessageTests.Sign.cs:line 40
   at System.Security.Cryptography.Cose.Tests.CoseMessageTests_Sign`1.SignVerify() in /_/src/libraries/System.Security.Cryptography.Cose/tests/CoseMessageTests.Sign.cs:line 99
   at System.Reflection.MethodBaseInvoker.InterpretedInvoke_Method(Object obj, IntPtr* args)
   at System.Reflection.MethodBaseInvoker.InvokeWithNoArgs(Object obj, BindingFlags invokeAttr)

[dotnet-policy-service]

Tagging subscribers to this area: @bartonjs, @vcsjones, @dotnet/area-system-security
See info in area-owners.md if you want to be subscribed.

[vcsjones]

@bartonjs I find it pretty bizarre that we have had key import problems with ECDSA and RSA on Apple... but only COSE tests seem to trigger it. I am sure we do key imports in other tests. Any thoughts, rabbit holes to suggest I look in to?

[bartonjs]

Not off the top of my head. The best starting place that I have is that it may be the first RSA key that the thread had to create at all (TestKeyRing is held as a ThreadStatic, and the getter calling RSA.Create means it hadn't already created a key), so maybe we somehow have a "new thread"/initialization problem we've never noticed before? Or a "crypto got used on too many threads already, I quit" problem?