Skip to content

Conversation

@vcsjones
Copy link
Member

The _password field is not needed since CryptDeriveKey was not ported from the Desktop framework and that was the only API that needed it.

Removing the field also allows removing a defensive copy and clearing it during disposal.

The _password field is not needed since CryptDeriveKey was not ported
from the Desktop framework.

Removing the field also allows removing a defensive copy and clearing it
during disposal.
@ghost ghost added the area-System.Security label Jan 26, 2021
@ghost
Copy link

ghost commented Jan 26, 2021

Tagging subscribers to this area: @bartonjs, @vcsjones, @krwq
See info in area-owners.md if you want to be subscribed.

Issue Details

The _password field is not needed since CryptDeriveKey was not ported from the Desktop framework and that was the only API that needed it.

Removing the field also allows removing a defensive copy and clearing it during disposal.

Author: vcsjones
Assignees: -
Labels:

area-System.Security

Milestone: -

@bartonjs bartonjs merged commit 2ecec9c into dotnet:master Jan 27, 2021
@vcsjones vcsjones deleted the rfc2898-cleanup branch January 27, 2021 18:07
@ghost ghost locked as resolved and limited conversation to collaborators Feb 26, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants