[.NET] Support for AWSSDK for .NET v4 (System.MissingMethodException)

[anranstl]

Hi,

I got following error after I upgrade AWS.EncryptionSDK, AWSSDK.KeyManagementService and AWSSDK.Core to latest version:

System.MissingMethodException: 'Method not found: 'Void Amazon.KeyManagementService.Model.GenerateDataKeyRequest.set_NumberOfBytes(Int32)'.'

This exception was originally thrown at this call stack: Com.Amazonaws.Kms.KeyManagementServiceShim.GenerateDataKey(Dafny.Com.Amazonaws.Kms._IGenerateDataKeyRequest) in KeyManagementServiceShim.cs Dafny.Aws.EncryptionSdk.Core.AwsKmsKeyring.AwsKmsKeyring.OnEncrypt(Dafny.Aws.EncryptionSdk.Core._IOnEncryptInput) in AwsKmsKeyring.cs Dafny.Aws.EncryptionSdk.Core.DefaultCMM.DefaultCMM.GetEncryptionMaterials(Dafny.Aws.EncryptionSdk.Core._IGetEncryptionMaterialsInput) in DefaultCMM.cs Dafny.Aws.EncryptionSdk.AwsEncryptionSdk.AwsEncryptionSdk.GetEncryptionMaterials(Dafny.Aws.EncryptionSdk.Core.ICryptographicMaterialsManager, Wrappers_Compile._IOption<Dafny.Aws.EncryptionSdk.Core._IAlgorithmSuiteId>, Wrappers_Compile._IOption<Dafny.IMap<Dafny.ISequence<byte>, Dafny.ISequence<byte>>>, long) in AwsEncryptionSdk.cs Dafny.Aws.EncryptionSdk.AwsEncryptionSdk.AwsEncryptionSdk.EncryptInternal(Dafny.Aws.EncryptionSdk._IEncryptInput) in AwsEncryptionSdk.cs Dafny.Aws.EncryptionSdk.AwsEncryptionSdk.AwsEncryptionSdk.Encrypt(Dafny.Aws.EncryptionSdk._IEncryptInput) in AwsEncryptionSdk.cs AWS.EncryptionSDK.AwsEncryptionSdk._Encrypt(AWS.EncryptionSDK.EncryptInput) in AwsEncryptionSdk.cs AWS.EncryptionSDK.AwsEncryptionSdkBase.Encrypt(AWS.EncryptionSDK.EncryptInput) in AwsEncryptionSdkBase.cs

And following is the versions I'm using:

<PackageReference Include="AWS.EncryptionSDK" Version="3.1.0" />
<PackageReference Include="AWSSDK.Core" Version="4.0.0.18" />
<PackageReference Include="AWSSDK.KeyManagementService" Version="4.0.3.9" />

And the error happened in Encrypt():

public string Encrypt(string plaintext, string keyArn)
        {
            MemoryStream plaintextStream = new MemoryStream(Encoding.UTF8.GetBytes(plaintext));
            // Instantiate the Material Providers and the AWS Encryption SDK
            var materialProviders = AwsCryptographicMaterialProvidersFactory.CreateDefaultAwsCryptographicMaterialProviders();
            var encryptionSdk = AwsEncryptionSdkFactory.CreateDefaultAwsEncryptionSdk();
            // Create the keyring that determines how your data keys are protected.
            var createKeyringInput = new CreateAwsKmsKeyringInput
            {
                KmsClient = new AmazonKeyManagementServiceClient(),
                KmsKeyId = keyArn
            };
            var keyring = materialProviders.CreateAwsKmsKeyring(createKeyringInput);
            // Encrypt your plaintext data.
            var encryptInput = new EncryptInput
            {
                Plaintext = plaintextStream,
                Keyring = keyring,
                EncryptionContext = _encryptionContext
            };
            var encryptOutput = encryptionSdk.Encrypt(encryptInput);
            var ciphertext = encryptOutput.Ciphertext;
            return WebEncoders.Base64UrlEncode(encryptOutput.Ciphertext.ToArray());
        }

I've tried use AWS.Cryptography.EncryptionSDK instead, but still have the same problem after I upgrade all of them to latest version. Can someone help me have a look at this problem?

[texastony]

@anranstl ,
Thank you for bringing this to our attention.
Unfortunately, all releases of the AWS Encryption SDK for .NET are not compatible with the AWS SDK for .NET v4.
They are only compatible with the AWS SDK for .NET v3.
The AWS SDK for .NET v4 introduced breaking changes.

To document this, AWS Crypto Tools released an update to the Material Providers library that details v4 is not supported:

AWSSDK.Core (>= 3.7.402.88 && < 4.0.0)
AWSSDK.KeyManagementService (>= 3.7.403.18 && < 4.0.0)
AWSSDK.DynamoDBv2 (>= 3.7.409.8 && < 4.0.0)

However, AWS Crypto Tools has not updated the older AWS.EncryptionSDK to detail this,
and the newer AWS.Cryptography.EncryptionSDK does not clearly describe that only:
AWSSDK.Core (>= 3.7.300.2 && < 4.0.0)
is supported.

To resolve your issue, please downgrade the AWS SDK for .NET dependencies to < 4.0.0.

Thank you,
AWS Crypto Tools

[hainguyenthanh5-oss]

Could you please tell if there is any plan to make AWS.Cryptography.EncryptionSDK package compatible with AWSSDK v4?

[kessplas]

Hey @hainguyenthanh5-oss ,

Adding support for AWS SDK for .NET V4 is on our road map but we can't give an ECD at this time.

[LensArt]

@kessplas is there any update on this? 4 months passed and it's still an issue.