On .NET10, there are APIs that use AES-KW, so we need to not use this code: [azure-activedirectory-identitymodel-extensions-for-dotnet/src/Microsoft.IdentityModel.Tokens/Encryption/SymmetricKeyWrapProvider.cs at d25996a6c7e9a9cd11655a70566e913d6ccdad51 · AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet](https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FAzureAD%2Fazure-activedirectory-identitymodel-extensions-for-dotnet%2Fblob%2Fd25996a6c7e9a9cd11655a70566e913d6ccdad51%2Fsrc%2FMicrosoft.IdentityModel.Tokens%2FEncryption%2FSymmetricKeyWrapProvider.cs%23L169&data=05%7C02%7Cwestinmusser%40microsoft.com%7C89d41b4554e14c634acc08de4e3d0dc2%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639034221353727973%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=I%2FOzSIMPvuIh2phVGZ%2BSKTkEWe65ovAklOCJ2iha5B8%3D&reserved=0) And use AES-KW instead: [Aes.EncryptKeyWrapPadded Method (System.Security.Cryptography) | Microsoft Learn](https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Flearn.microsoft.com%2Fen-us%2Fdotnet%2Fapi%2Fsystem.security.cryptography.aes.encryptkeywrappadded%3Fview%3Dnet-10.0%26viewFallbackFrom%3Dnet-10.0-pp&data=05%7C02%7Cwestinmusser%40microsoft.com%7C89d41b4554e14c634acc08de4e3d0dc2%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639034221353741891%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=QKNQFQwLYK1MogIrFcfCr3y%2BZ8UgnHDwzdxrSYa3V1U%3D&reserved=0)
On .NET10, there are APIs that use AES-KW, so we need to not use this code: azure-activedirectory-identitymodel-extensions-for-dotnet/src/Microsoft.IdentityModel.Tokens/Encryption/SymmetricKeyWrapProvider.cs at d25996a6c7e9a9cd11655a70566e913d6ccdad51 · AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet
And use AES-KW instead: Aes.EncryptKeyWrapPadded Method (System.Security.Cryptography) | Microsoft Learn