<PackageReference Include="BouncyCastle.Cryptography" Version="2.6.2" />

Org.BouncyCastle.Tls.Crypto.Impl.BC.BcDefaultTlsCredentialedDecryptor

Credentialed class decrypting RSA encrypted secrets sent from a peer for our end of the TLS connection using the BC light-weight API.
namespace Org.BouncyCastle.Tls.Crypto.Impl.BC { public class BcDefaultTlsCredentialedDecryptor : TlsCredentialedDecryptor, TlsCredentials { protected readonly BcTlsCrypto m_crypto; protected readonly Certificate m_certificate; protected readonly AsymmetricKeyParameter m_privateKey; public virtual Certificate Certificate { get; } public BcDefaultTlsCredentialedDecryptor(BcTlsCrypto crypto, Certificate certificate, AsymmetricKeyParameter privateKey); public virtual TlsSecret Decrypt(TlsCryptoParameters cryptoParams, byte[] ciphertext); protected virtual TlsSecret SafeDecryptPreMasterSecret(TlsCryptoParameters cryptoParams, RsaKeyParameters rsaServerPrivateKey, byte[] encryptedPreMasterSecret); } }