[release/8.0] RSA-384/SHA1 signature verification fails on Android - fix from #118366 not backported

[ViveliDuCh]

Build Information

Build: https://dev.azure.com/dnceng-public/public/_build/results?buildId=1597620
Build error leg or test failing: net8.0-android-Release-arm64-Mono_Release / System.Security.Cryptography.Rsa.Tests.SignVerify_*.VerifySignature_SHA1_384, PublicKeyTests.TestKey_RSA384_ValidatesSignature
Pull request: #133957 (release/8.0-staging -> release/8.0 merge)

Assert.True() Failure
Expected: True
Actual:   False
   at System.Security.Cryptography.Rsa.Tests.SignVerify.VerifySignature(Byte[] signature, Byte[] data, String hashAlgorithmName, RSAParameters rsaParameters) in /_/src/libraries/Common/tests/System/Security/Cryptography/AlgorithmImplementations/RSA/SignVerify.cs:line 1552

Console log: https://helixr1107v0xdeko0k025g8.blob.core.windows.net/dotnet-runtime-refs-heads-release-80-staging-fd103e1897d64f92b0/System.Security.Cryptography.Tests/1/console.091581a7.log?helixlogtype=result

First reported here: #118366
Fixed on main by #118880 (backported to main via #118950), but that fix was never backported to release/8.0 — confirmed neither release/8.0 nor release/8.0-staging contains commit 1765399 or deae3d2. Requesting the fix be backported to release/8.0.

Error Message

{
  "ErrorMessage": "Assert.True() Failure\nExpected: True\nActual:   False",
  "ErrorPattern": "SignVerify_.*\\.VerifySignature_SHA1_384",
  "BuildRetry": false,
  "ExcludeConsoleLog": false
}

Note

This issue was filed with AI assistance (GitHub Copilot CLI).

Known issue validation

Build: 🔎 https://dev.azure.com/dnceng-public/public/_build/results?buildId=1597620
Error message validated: [SignVerify_.*\.VerifySignature_SHA1_384]
Result validation: ❌ Known issue did not match with the provided build.
Validation performed at: 9/15/2026 10:52:27 PM UTC

Report

Build	Repository	Test	Pull Request
1605355	dotnet/runtime	System.Security.Cryptography.X509Certificates.Tests.AppAndCertPoliciesChainTests.CertificatePolicyTest
1602914	dotnet/runtime	System.Security.Cryptography.Tests.MLDsaOpenSslTests.GenerateSignVerifyExternalMuNoContext	#134060
1604459	dotnet/runtime	System.Security.Cryptography.X509Certificates.Tests.DynamicChainTests.BuildChainForExpiredSelfSignedCertificate
1603402	dotnet/runtime	System.Security.Cryptography.X509Certificates.Tests.DynamicChainTests.BuildChainForExpiredSelfSignedCertificate
1603249	dotnet/runtime	System.Security.Cryptography.Tests.ChaCha20Poly1305Tests.EncryptTamperAADDecrypt
1602810	dotnet/runtime	System.Security.Cryptography.Tests.ChaCha20Poly1305Tests.EncryptTamperAADDecrypt
1602441	dotnet/runtime	System.Security.Cryptography.Tests.ChaCha20Poly1305Tests.EncryptTamperAADDecrypt
1602019	dotnet/runtime	System.Security.Cryptography.Tests.ChaCha20Poly1305Tests.EncryptTamperAADDecrypt
1601987	dotnet/runtime	System.Security.Cryptography.X509Certificates.Tests.DynamicChainTests.BuildChainForExpiredSelfSignedCertificate
1601744	dotnet/runtime	System.Security.Cryptography.Tests.ChaCha20Poly1305Tests.EncryptTamperAADDecrypt
1601683	dotnet/runtime	System.Security.Cryptography.X509Certificates.Tests.DynamicChainTests.BuildChainForExpiredSelfSignedCertificate	#133828
1601144	dotnet/runtime	System.Security.Cryptography.Tests.ChaCha20Poly1305Tests.EncryptTamperAADDecrypt
1600746	dotnet/runtime	System.Security.Cryptography.Tests.ChaCha20Poly1305Tests.EncryptTamperAADDecrypt
1600403	dotnet/runtime	System.Security.Cryptography.X509Certificates.Tests.DynamicChainTests.BuildChainForExpiredSelfSignedCertificate
1599622	dotnet/runtime	System.Security.Cryptography.Tests.ChaCha20Poly1305Tests.EncryptTamperAADDecrypt
1598688	dotnet/runtime	System.Security.Cryptography.X509Certificates.Tests.DynamicChainTests.BuildChainForExpiredSelfSignedCertificate
1598532	dotnet/runtime	System.Security.Cryptography.Tests.ChaCha20Poly1305Tests.EncryptTamperAADDecrypt
1597620	dotnet/runtime	System.Security.Cryptography.Tests.WorkItemExecution
1598028	dotnet/runtime	System.Security.Cryptography.Tests.ChaCha20Poly1305Tests.EncryptTamperAADDecrypt

Summary

24-Hour Hit Count	7-Day Hit Count	1-Month Count
2	19	19

[dotnet-policy-service]

Tagging subscribers to 'arch-android': @vitek-karas, @simonrozsival, @steveisok, @akoeplinger
See info in area-owners.md if you want to be subscribed.

[dotnet-policy-service]

Tagging subscribers to this area: @bartonjs, @vcsjones, @dotnet/area-system-security
See info in area-owners.md if you want to be subscribed.

[vcsjones]

I don't think the actual fix would meet the backport bar for release/8.0 at this point. We should just disable the test for the ~2 months left on the release 8.0 cycle.

[bartonjs]

agreed, let's disable the test for Android