Cose.Tests.TestKeyRing.CreateECDsa fails with "OSStatus error -50"

[jkotas]

Build Information

Build: https://dev.azure.com/dnceng-public/cbb18261-c48f-4abb-8651-8cdcb5474649/_build/results?buildId=1210512
Build error leg or test failing: System.Security.Cryptography.Cose.Tests.CoseMultiSignMessageTests_SignStream_Async.SignWithNullHeaderMaps
Pull request: #121898

Error Message

Fill the error message using step by step known issues guidance.

{
  "ErrorMessage": "AppleCFErrorCryptographicException : The operation couldn’t be completed. (OSStatus error -50",
  "ErrorPattern": "",
  "BuildRetry": false,
  "ExcludeConsoleLog": false
}

Known issue validation

Build: 🔎 https://dev.azure.com/dnceng-public/public/_build/results?buildId=1210512
Error message validated: [AppleCFErrorCryptographicException : The operation couldn’t be completed. (OSStatus error -50]
Result validation: ✅ Known issue matched with the provided build.
Validation performed at: 11/23/2025 6:27:48 AM UTC

Report

Build	Definition	Test	Pull Request
1292767	dotnet/runtime	System.Security.Cryptography.Cose.Tests.CoseMultiSignMessageTests_SignStream_Async.SignWithNullHeaderMaps	#123521
1289428	dotnet/runtime	System.Security.Cryptography.Cose.Tests.CoseSign1MessageTests_SignStream_Sync.SignWithNullProtectedHeaderMap
1286953	dotnet/runtime	System.Security.Cryptography.Cose.Tests.CoseMultiSignMessageTests_VerifyEmbedded.VerifyThrowsIfKeyIsNull
1286061	dotnet/runtime	System.Security.Cryptography.Cose.Tests.CoseMultiSignMessageTests_SignStream_Async.SignWithNullHeaderMaps
1284199	dotnet/runtime	System.Security.Cryptography.Cose.Tests.CoseMultiSignMessageTests_VerifyStream_Async.VerifyThrowsIfIncorrectIntegerAlgorithm
1282804	dotnet/runtime	System.Security.Cryptography.Cose.Tests.CoseMultiSignMessageTests_Sign_ByteArray.MultiSign_SignWithCriticalHeaders_NotTransportingTheSpecifiedCriticalHeaderThrows_BodyHeaders	#124000
1281859	dotnet/runtime	System.Security.Cryptography.Cose.Tests.CoseMultiSignMessageTests_TrySign.SignWithValidContent	#124058
1278818	dotnet/runtime	System.Security.Cryptography.Cose.Tests.CoseSign1MessageTests_Sign_ByteArray.ReEncodeWithDuplicateHeaderBetweenProtectedAndUnprotected	#123976
1273199	dotnet/runtime	System.Security.Cryptography.Cose.Tests.CoseMultiSignMessageTests_VerifyStream_Sync.VerifyThrowsIfKeyIsNull	#122722
1267951	dotnet/runtime	System.Security.Cryptography.Cose.Tests.CoseSignerTests.CoseSigner_RSAKeyNeedsSignaturePadding
1265645	dotnet/runtime	System.Security.Cryptography.Cose.Tests.CoseSign1MessageTests_SignStream_Async.SignWithUnsupportedCoseAlgorithm
1265586	dotnet/runtime	System.Security.Cryptography.Cose.Tests.CoseSign1MessageTests_SignStream_Async.SignWithUnsupportedCoseAlgorithm	#123526
1264233	dotnet/runtime	System.Security.Cryptography.Cose.Tests.CoseMultiSignMessageTests_SignStream_Async.SignWithNullHeaderMaps
1262591	dotnet/runtime	System.Security.Cryptography.Cose.Tests.CoseMultiSignMessageTests_VerifyEmbedded.VerifyThrowsIfKeyIsNull	#123481
1261771	dotnet/runtime	System.Security.Cryptography.Cose.Tests.CoseSign1MessageTests_SignStream_Async.SignWithUnsupportedCoseAlgorithm
1260593	dotnet/runtime	System.Security.Cryptography.Cose.Tests.CoseMultiSignMessageTests_SignStream_Sync.SignVerifyWithAssociatedData	#122373
1260123	dotnet/runtime	System.Security.Cryptography.Cose.Tests.CoseSign1MessageTests_SignStream_Async.SignWithUnsupportedCoseAlgorithm	#122371
1259962	dotnet/runtime	System.Security.Cryptography.Cose.Tests.CoseSign1MessageTests_VerifyDetached.VerifyThrowsWithUnknownAlgorithm
1259961	dotnet/runtime	System.Security.Cryptography.Cose.Tests.CoseMultiSignMessageTests_SignStream_Async.SignWithNullHeaderMaps
1259210	dotnet/runtime	System.Security.Cryptography.Cose.Tests.CoseSign1MessageTests_SignStream_Sync.SignWithNullProtectedHeaderMap

Summary

24-Hour Hit Count	7-Day Hit Count	1-Month Count
0	4	20

[jkotas]

Failure log:

    System.Security.Cryptography.Cose.Tests.CoseMultiSignMessageTests_SignStream_Async.SignWithNullHeaderMaps [FAIL]
      Interop+AppleCrypto+AppleCFErrorCryptographicException : The operation couldn’t be completed. (OSStatus error -50 - Unsupported key type: 73 (converted value: 73)
      Stack Trace:
        /_/src/libraries/Common/src/Interop/OSX/System.Security.Cryptography.Native.Apple/Interop.SecKeyRef.cs(117,0): at Interop.AppleCrypto.CreateDataKey(ReadOnlySpan`1 keyData, PAL_KeyAlgorithm keyAlgorithm, Boolean isPublic)
        /_/src/libraries/Common/src/System/Security/Cryptography/EccAppleCrypto.cs(261,0): at System.Security.Cryptography.EccAppleCrypto.ImportKey(ECParameters parameters)
        /_/src/libraries/Common/src/System/Security/Cryptography/EccAppleCrypto.cs(219,0): at System.Security.Cryptography.EccAppleCrypto.ImportParameters(ECParameters parameters)
        /_/src/libraries/Common/src/System/Security/Cryptography/ECDsaAppleCrypto.cs(166,0): at System.Security.Cryptography.ECDsaImplementation.ECDsaAppleCrypto.ImportParameters(ECParameters parameters)
        /_/src/libraries/System.Security.Cryptography/src/System/Security/Cryptography/ECDsa.Create.AppleCrypto.cs(49,0): at System.Security.Cryptography.ECDsa.Create(ECParameters parameters)
        /_/src/libraries/System.Security.Cryptography.Cose/tests/TestKeyRing.cs(63,0): at System.Security.Cryptography.Cose.Tests.TestKeyRing.CreateECDsa(ECParameters parameters, Boolean includePrivateKey)
        /_/src/libraries/System.Security.Cryptography.Cose/tests/TestKeyRing.cs(23,0): at System.Security.Cryptography.Cose.Tests.TestKeyRing.get_ES256()
        /_/src/libraries/System.Security.Cryptography.Cose/tests/CoseTestHelpers.cs(470,0): at System.Security.Cryptography.Cose.Tests.CoseTestHelpers.get_ES256()
        /_/src/libraries/System.Security.Cryptography.Cose/tests/CoseTestHelpers.cs(514,0): at System.Security.Cryptography.Cose.Tests.CoseTestHelpers.GetKeyHashPaddingTriplet[T](CoseAlgorithm algorithm, Boolean useNonPrivateKey)
        /_/src/libraries/System.Security.Cryptography.Cose/tests/CoseMessageTests.Sign.cs(18,0): at System.Security.Cryptography.Cose.Tests.CoseMessageTests_Sign`1.get_DefaultKey()
        /_/src/libraries/System.Security.Cryptography.Cose/tests/CoseMessageTests.Sign.CustomHeaderMaps.cs(152,0): at System.Security.Cryptography.Cose.Tests.CoseMessageTests_Sign_CustomHeaderMaps.SignWithNullHeaderMaps()
           at System.RuntimeMethodHandle.InvokeMethod(ObjectHandleOnStack target, Void** arguments, ObjectHandleOnStack sig, BOOL isConstructor, ObjectHandleOnStack result)
           at System.RuntimeMethodHandle.InvokeMethod(ObjectHandleOnStack target, Void** arguments, ObjectHandleOnStack sig, BOOL isConstructor, ObjectHandleOnStack result)
        /_/src/coreclr/System.Private.CoreLib/src/System/RuntimeHandles.cs(1165,0): at System.RuntimeMethodHandle.InvokeMethod(Object target, Void** arguments, Signature sig, Boolean isConstructor)
        /_/src/coreclr/System.Private.CoreLib/src/System/Reflection/MethodBaseInvoker.CoreCLR.cs(36,0): at System.Reflection.MethodBaseInvoker.InterpretedInvoke_Method(Object obj, IntPtr* args)
        /_/src/libraries/System.Private.CoreLib/src/System/Reflection/MethodBaseInvoker.cs(57,0): at System.Reflection.MethodBaseInvoker.InvokeWithNoArgs(Object obj, BindingFlags invokeAttr)

[dotnet-policy-service]

Tagging subscribers to this area: @dotnet/area-system-security, @bartonjs, @vcsjones
See info in area-owners.md if you want to be subscribed.

[vcsjones]

Unless someone beats me to it I will look at this December 4th when I am back from time off.

[vcsjones]

OSStatus error -50 - Unsupported key type: 73

That is really strange because 73 is ECDSA. https://github.com/apple-oss-distributions/Security/blob/db15acbe6a7f257a859ad9a3bb86097bfe0679d9/OSX/sec/Security/SecItemConstants.c#L244-L246