Valid RSA-384 signatures are sometimes reported as invalid on Android

[bartonjs]

Build Information

Build: https://dev.azure.com/dnceng-public/cbb18261-c48f-4abb-8651-8cdcb5474649/_build/results?buildId=1113280
Build error leg or test failing: System.Security.Cryptography.Rsa.Tests.SignVerify_AllocatingSpan.VerifySignature_SHA1_384
Pull request: #118357

Error Message

Fill the error message using step by step known issues guidance.

{
  "ErrorMessage": "System.Security.Cryptography.Rsa.Tests.SignVerify.VerifySignature_SHA1_384",
  "ErrorPattern": "",
  "BuildRetry": false,
  "ExcludeConsoleLog": false
}

Known issue validation

Build: 🔎 https://dev.azure.com/dnceng-public/public/_build/results?buildId=1113280
Error message validated: [System.Security.Cryptography.Rsa.Tests.SignVerify.VerifySignature_SHA1_384]
Result validation: ✅ Known issue matched with the provided build.
Validation performed at: 8/14/2025 3:47:19 PM UTC

[dotnet-policy-service]

Tagging subscribers to 'arch-android': @vitek-karas, @simonrozsival, @steveisok, @akoeplinger
See info in area-owners.md if you want to be subscribed.

[bartonjs]

Log exerpts:

08-04 16:15:43.779 24360 25422 I DOTNET  : Failed tests:
08-04 16:15:43.779 24360 25422 I DOTNET  : 1)  [FAIL] System.Security.Cryptography.X509Certificates.Tests.PublicKeyTests.TestKey_RSA384_ValidatesSignature   Test name: System.Security.Cryptography.X509Certificates.Tests.PublicKeyTests.TestKey_RSA384_ValidatesSignature
08-04 16:15:43.780 24360 25422 I DOTNET  :    Assembly:  [System.Security.Cryptography.Tests, Version=10.0.0.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51]
08-04 16:15:43.780 24360 25422 I DOTNET  :    Exception messages: Assert.True() Failure
08-04 16:15:43.780 24360 25422 I DOTNET  : Expected: True
08-04 16:15:43.780 24360 25422 I DOTNET  : Actual:   False   Exception stack traces:    at System.Security.Cryptography.X509Certificates.Tests.PublicKeyTests.TestKey_RSA384_ValidatesSignature()
08-04 16:15:43.780 24360 25422 I DOTNET  :    at System.RuntimeMethodHandle.InvokeMethod(ObjectHandleOnStack target, Void** arguments, ObjectHandleOnStack sig, BOOL isConstructor, ObjectHandleOnStack result)
08-04 16:15:43.780 24360 25422 I DOTNET  :    at System.RuntimeMethodHandle.InvokeMethod(ObjectHandleOnStack target, Void** arguments, ObjectHandleOnStack sig, BOOL isConstructor, ObjectHandleOnStack result)
08-04 16:15:43.780 24360 25422 I DOTNET  :    at System.Reflection.MethodBaseInvoker.InterpretedInvoke_Method(Object obj, IntPtr* args)
08-04 16:15:43.780 24360 25422 I DOTNET  :    at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
08-04 16:15:43.780 24360 25422 I DOTNET  :    Execution time: 0.0045265
08-04 16:15:43.780 24360 25422 I DOTNET  : 2)  [FAIL] System.Security.Cryptography.Rsa.Tests.SignVerify_Span.VerifySignature_SHA1_384   Test name: System.Security.Cryptography.Rsa.Tests.SignVerify_Span.VerifySignature_SHA1_384
08-04 16:15:43.780 24360 25422 I DOTNET  :    Assembly:  [System.Security.Cryptography.Tests, Version=10.0.0.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51]
08-04 16:15:43.780 24360 25422 I DOTNET  :    Exception messages: Assert.True() Failure
08-04 16:15:43.780 24360 25422 I DOTNET  : Expected: True
08-04 16:15:43.780 24360 25422 I DOTNET  : Actual:   False   Exception stack traces:    at System.Security.Cryptography.Rsa.Tests.SignVerify.VerifySignature(Byte[] signature, Byte[] data, String hashAlgorithmName, RSAParameters rsaParameters)
08-04 16:15:43.780 24360 25422 I DOTNET  :    at System.Security.Cryptography.Rsa.Tests.SignVerify.VerifySignature_SHA1_384()
08-04 16:15:43.780 24360 25422 I DOTNET  :    at System.RuntimeMethodHandle.InvokeMethod(ObjectHandleOnStack target, Void** arguments, ObjectHandleOnStack sig, BOOL isConstructor, ObjectHandleOnStack result)
08-04 16:15:43.780 24360 25422 I DOTNET  :    at System.RuntimeMethodHandle.InvokeMethod(ObjectHandleOnStack target, Void** arguments, ObjectHandleOnStack sig, BOOL isConstructor, ObjectHandleOnStack result)
08-04 16:15:43.780 24360 25422 I DOTNET  :    at System.Reflection.MethodBaseInvoker.InterpretedInvoke_Method(Object obj, IntPtr* args)
08-04 16:15:43.780 24360 25422 I DOTNET  :    at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
08-04 16:15:43.780 24360 25422 I DOTNET  :    Execution time: 0.0024555
08-04 16:15:43.780 24360 25422 I DOTNET  : 3)  [FAIL] System.Security.Cryptography.Rsa.Tests.SignVerify_AllocatingSpan.VerifySignature_SHA1_384   Test name: System.Security.Cryptography.Rsa.Tests.SignVerify_AllocatingSpan.VerifySignature_SHA1_384
08-04 16:15:43.780 24360 25422 I DOTNET  :    Assembly:  [System.Security.Cryptography.Tests, Version=10.0.0.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51]
08-04 16:15:43.780 24360 25422 I DOTNET  :    Exception messages: Assert.True() Failure
08-04 16:15:43.780 24360 25422 I DOTNET  : Expected: True
08-04 16:15:43.780 24360 25422 I DOTNET  : Actual:   False   Exception stack traces:    at System.Security.Cryptography.Rsa.Tests.SignVerify.VerifySignature(Byte[] signature, Byte[] data, String hashAlgorithmName, RSAParameters rsaParameters)
08-04 16:15:43.780 24360 25422 I DOTNET  :    at System.Security.Cryptography.Rsa.Tests.SignVerify.VerifySignature_SHA1_384()
08-04 16:15:43.780 24360 25422 I DOTNET  :    at System.RuntimeMethodHandle.InvokeMethod(ObjectHandleOnStack target, Void** arguments, ObjectHandleOnStack sig, BOOL isConstructor, ObjectHandleOnStack result)
08-04 16:15:43.780 24360 25422 I DOTNET  :    at System.RuntimeMethodHandle.InvokeMethod(ObjectHandleOnStack target, Void** arguments, ObjectHandleOnStack sig, BOOL isConstructor, ObjectHandleOnStack result)
08-04 16:15:43.780 24360 25422 I DOTNET  :    at System.Reflection.MethodBaseInvoker.InterpretedInvoke_Method(Object obj, IntPtr* args)
08-04 16:15:43.780 24360 25422 I DOTNET  :    at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
08-04 16:15:43.780 24360 25422 I DOTNET  :    Execution time: 0.0021285
08-04 16:15:43.780 24360 25422 I DOTNET  : 4)  [FAIL] System.Security.Cryptography.Rsa.Tests.SignVerify_Array.VerifySignature_SHA1_384   Test name: System.Security.Cryptography.Rsa.Tests.SignVerify_Array.VerifySignature_SHA1_384
08-04 16:15:43.780 24360 25422 I DOTNET  :    Assembly:  [System.Security.Cryptography.Tests, Version=10.0.0.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51]
08-04 16:15:43.780 24360 25422 I DOTNET  :    Exception messages: Assert.True() Failure
08-04 16:15:43.780 24360 25422 I DOTNET  : Expected: True
08-04 16:15:43.780 24360 25422 I DOTNET  : Actual:   False   Exception stack traces:    at System.Security.Cryptography.Rsa.Tests.SignVerify.VerifySignature(Byte[] signature, Byte[] data, String hashAlgorithmName, RSAParameters rsaParameters)
08-04 16:15:43.780 24360 25422 I DOTNET  :    at System.Security.Cryptography.Rsa.Tests.SignVerify.VerifySignature_SHA1_384()
08-04 16:15:43.780 24360 25422 I DOTNET  :    at System.RuntimeMethodHandle.InvokeMethod(ObjectHandleOnStack target, Void** arguments, ObjectHandleOnStack sig, BOOL isConstructor, ObjectHandleOnStack result)
08-04 16:15:43.780 24360 25422 I DOTNET  :    at System.RuntimeMethodHandle.InvokeMethod(ObjectHandleOnStack target, Void** arguments, ObjectHandleOnStack sig, BOOL isConstructor, ObjectHandleOnStack result)
08-04 16:15:43.780 24360 25422 I DOTNET  :    at System.Reflection.MethodBaseInvoker.InterpretedInvoke_Method(Object obj, IntPtr* args)
08-04 16:15:43.780 24360 25422 I DOTNET  :    at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
08-04 16:15:43.780 24360 25422 I DOTNET  :    Execution time: 0.001482
08-04 16:15:43.780 24360 25422 I DOTNET  : 5)  [FAIL] System.Security.Cryptography.Rsa.Tests.SignVerify_TrySpan.VerifySignature_SHA1_384   Test name: System.Security.Cryptography.Rsa.Tests.SignVerify_TrySpan.VerifySignature_SHA1_384
08-04 16:15:43.780 24360 25422 I DOTNET  :    Assembly:  [System.Security.Cryptography.Tests, Version=10.0.0.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51]
08-04 16:15:43.780 24360 25422 I DOTNET  :    Exception messages: Assert.True() Failure
08-04 16:15:43.780 24360 25422 I DOTNET  : Expected: True
08-04 16:15:43.780 24360 25422 I DOTNET  : Actual:   False   Exception stack traces:    at System.Security.Cryptography.Rsa.Tests.SignVerify.VerifySignature(Byte[] signature, Byte[] data, String hashAlgorithmName, RSAParameters rsaParameters)
08-04 16:15:43.780 24360 25422 I DOTNET  :    at System.Security.Cryptography.Rsa.Tests.SignVerify.VerifySignature_SHA1_384()
08-04 16:15:43.780 24360 25422 I DOTNET  :    at System.RuntimeMethodHandle.InvokeMethod(ObjectHandleOnStack target, Void** arguments, ObjectHandleOnStack sig, BOOL isConstructor, ObjectHandleOnStack result)
08-04 16:15:43.780 24360 25422 I DOTNET  :    at System.RuntimeMethodHandle.InvokeMethod(ObjectHandleOnStack target, Void** arguments, ObjectHandleOnStack sig, BOOL isConstructor, ObjectHandleOnStack result)
08-04 16:15:43.780 24360 25422 I DOTNET  :    at System.Reflection.MethodBaseInvoker.InterpretedInvoke_Method(Object obj, IntPtr* args)
08-04 16:15:43.780 24360 25422 I DOTNET  :    at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
08-04 16:15:43.780 24360 25422 I DOTNET  :    Execution time: 0.001561

It doesn't seem to happen on every Android run, so maybe one of the machines is on a new OS version than the rest?

[dotnet-policy-service]

Tagging subscribers to this area: @dotnet/area-system-security, @bartonjs, @vcsjones
See info in area-owners.md if you want to be subscribed.

[BrzVlad]

Reproduces on my local device

[vitek-karas]

We'll investigate and see if this needs a fix in RC2.