Released: Jun 1, 2026

Updates in 7.0.9649

Features

• Cryptography: Added workaround for uncommon RSA keys with very long exponents.
• Cryptography: Now checks public key during any Diffie-Hellman key exchange.
• Cryptography: Improved compatibility with Windows CNG keys.
• Cryptography: Improved private key handling in CNG interop.
• Cryptography: Now uses constant-time-compares where appropriate.
• SSH: Improved compatibility of 'SSH2 PUBLIC KEY' file loader.
• SSH: Now clears raw SSH_MSG_USERAUTH_REQUEST contents as soon as encrypted.
• SSH: Now rejects non-standard public key formats during SSH negotiation.

Fixes

• Cryptography: Fixed .NET 10 detection in .NET Standard binaries.
• Cryptography: Fixed Base-64 decoding of PEM files in SignedData/EnvelopedData Load method.
• Cryptography: Fixed detection of AES/GCM support in .NET Standard 2.1 on macOS.
• Cryptography: Fixed detection of buggy AES CSP in .NET Framework 3.5 on recent Windows.
• Cryptography: Fixed handling of RSA/PSS with uncommon salt lengths on recent non-Windows .NET platforms.
• Cryptography: Fixed handling of RSA/SHA-224 for CNG-based private keys.