to public api - its a nightmare to implement otherwise

Author: DeagleGross

src/DataProtection/Abstractions/src/IDataProtector.cs

@@ -34,7 +34,7 @@ public interface IDataProtector : IDataProtectionProvider
     /// </summary>
     /// <param name="plainText">The plain text that will be encrypted later</param>
     /// <returns>The length of the encrypted data</returns>
-    internal int GetProtectedSize(ReadOnlySpan<byte> plainText);
+    int GetProtectedSize(ReadOnlySpan<byte> plainText);
 
     /// <summary>
     /// Attempts to encrypt and tamper-proof a piece of data.
@@ -43,6 +43,6 @@ public interface IDataProtector : IDataProtectionProvider
     /// <param name="destination">The ciphertext blob, including authentication tag.</param>
     /// <param name="bytesWritten">When this method returns, the total number of bytes written into destination</param>
     /// <returns>true if destination is long enough to receive the encrypted data; otherwise, false.</returns>
-    internal bool TryProtect(ReadOnlySpan<byte> plainText, Span<byte> destination, out int bytesWritten);
+    bool TryProtect(ReadOnlySpan<byte> plainText, Span<byte> destination, out int bytesWritten);
 #endif
 }

src/DataProtection/Abstractions/src/PublicAPI.Unshipped.txt

@@ -1 +1,3 @@
 #nullable enable
+Microsoft.AspNetCore.DataProtection.IDataProtector.GetProtectedSize(System.ReadOnlySpan<byte> plainText) -> int
+Microsoft.AspNetCore.DataProtection.IDataProtector.TryProtect(System.ReadOnlySpan<byte> plainText, System.Span<byte> destination, out int bytesWritten) -> bool

src/DataProtection/DataProtection/src/AuthenticatedEncryption/AuthenticatedEncryptorExtensions.cs

@@ -32,21 +32,6 @@ public static byte[] Encrypt(this IAuthenticatedEncryptor encryptor, ArraySegmen
         }
     }
 
-#if NET10_0_OR_GREATER
-    public static bool TryEncrypt(
-        this IAuthenticatedEncryptor encryptor,
-        ReadOnlySpan<byte> plaintext,
-        ReadOnlySpan<byte> additionalAuthenticatedData,
-        Span<byte> destination,
-        int preBufferSize,
-        int postBufferSize,
-        out int bytesWritten)
-    {
-        var destinationBufferOffsets = destination.Slice(preBufferSize, destination.Length - (preBufferSize + postBufferSize));
-        return encryptor.TryEncrypt(plaintext, additionalAuthenticatedData, destinationBufferOffsets, out bytesWritten);
-    }
-#endif
-
     /// <summary>
     /// Performs a self-test of this encryptor by running a sample payload through an
     /// encrypt-then-decrypt operation. Throws if the operation fails.

src/DataProtection/DataProtection/src/AuthenticatedEncryption/IAuthenticatedEncryptor.cs

@@ -39,7 +39,7 @@ public interface IAuthenticatedEncryptor
     /// </summary>
     /// <param name="plainTextLength">Length of the plain text that will be encrypted later</param>
     /// <returns>The length of the encrypted data</returns>
-    internal int GetEncryptedSize(int plainTextLength);
+    int GetEncryptedSize(int plainTextLength);
 
     /// <summary>
     /// Attempts to encrypt and tamper-proof a piece of data.
@@ -53,6 +53,6 @@ public interface IAuthenticatedEncryptor
     /// <param name="destination">The ciphertext blob, including authentication tag.</param>
     /// <param name="bytesWritten">When this method returns, the total number of bytes written into destination</param>
     /// <returns>true if destination is long enough to receive the encrypted data; otherwise, false.</returns>
-    internal bool TryEncrypt(ReadOnlySpan<byte> plaintext, ReadOnlySpan<byte> additionalAuthenticatedData, Span<byte> destination, out int bytesWritten);
+    bool TryEncrypt(ReadOnlySpan<byte> plaintext, ReadOnlySpan<byte> additionalAuthenticatedData, Span<byte> destination, out int bytesWritten);
 #endif
 }

src/DataProtection/DataProtection/src/PublicAPI.Unshipped.txt

@@ -1 +1,3 @@
 #nullable enable
+Microsoft.AspNetCore.DataProtection.AuthenticatedEncryption.IAuthenticatedEncryptor.GetEncryptedSize(int plainTextLength) -> int
+Microsoft.AspNetCore.DataProtection.AuthenticatedEncryption.IAuthenticatedEncryptor.TryEncrypt(System.ReadOnlySpan<byte> plaintext, System.ReadOnlySpan<byte> additionalAuthenticatedData, System.Span<byte> destination, out int bytesWritten) -> bool