Data Protection Version Repro

Minimal repro for testing payload compatibility between:

• Microsoft.AspNetCore.DataProtection 10.0.5
• Microsoft.AspNetCore.DataProtection 10.0.6

Both apps:

• target .NET 10
• use the same application name: DataProtectionVersionRepro
• use the same purpose string: secret
• default to the same key ring directory: ./shared-keys

Build

dotnet build

Run the full repro

./run-repro.sh

Optional secret value:

./run-repro.sh "my-secret"

Protect with 10.0.5, unprotect with 10.0.6

dotnet build
payload=$(dotnet run --no-build --project src/DataProtection105 -- protect "super-secret")
dotnet run --no-build --project src/DataProtection106 -- unprotect "$payload"

Protect with 10.0.6, unprotect with 10.0.5

dotnet build
payload=$(dotnet run --no-build --project src/DataProtection106 -- protect "super-secret")
dotnet run --no-build --project src/DataProtection105 -- unprotect "$payload"

Explicit key ring path

dotnet run --no-build --project src/DataProtection105 -- protect "super-secret" ./shared-keys
dotnet run --no-build --project src/DataProtection106 -- unprotect "<payload>" ./shared-keys

If either cross-version unprotect fails, the console app exits with code 2 and prints the exception to stderr.