---
id: change/bcapps/9291
type: change
title: "#9291 Add [NonDebuggable] to Cryptography Management encrypt/decrypt procedures"
summary: The Cryptography Management system application now marks all encryption and decryption procedures with the NonDebuggable attribute to prevent AL debugger access to sensitive cleartext data.
tier: official
language: en
tags:
  - fix
  - main
  - bc30
  - codeunit cryptography management
  - codeunit cryptography management impl.
system: administration
review:
  state: reviewed
  by: opus
  at: "2026-10-08T02:13:17.083Z"
  flags: []
generated:
  at: "2026-10-08T01:26:53.141Z"
  pipeline: 0.2.0
  prompts:
    extract-change: 1
  input_hash: b52c0c13e7557a808db140f68ec0dce12680dd78
evidence:
  - kind: code
    url: https://github.com/microsoft/BCApps/pull/9291
    title: "microsoft/BCApps#9291: Add [NonDebuggable] to Cryptography Management encrypt/decrypt procedures"
    date: "2026-07-10"
    commit: b52c0c13e7557a808db140f68ec0dce12680dd78
    t: null
    quote: Added [NonDebuggable] to all four affected procedures
links:
  learn: []
  objects:
    - object/codeunit/1266
    - object/codeunit/1279
  features: []
  topics: []
  localizations: []
  videos: []
  posts: []
  guidelines: []
  changes: []
number: 9291
repo: microsoft/BCApps
source_id: bcapps-prs
url: https://github.com/microsoft/BCApps/pull/9291
kind: pr
base_branch: main
major: "30"
merged_at: "2026-07-10T13:04:57Z"
author: PooyaKharamesh
author_type: User
community_contribution: false
labels:
  - "AL: System Application"
change_class: code
change_kind: fix
behavior_change: true
breaking: false
files:
  count: 2
  additions: 4
  deletions: 0
  al: 2
apps:
  - System Application
objects_touched:
  - key: codeunit/1266
    page: codeunit/1266
    type: codeunit
    id: 1266
    name: Cryptography Management
    app: System Application
    status: modified
  - key: codeunit/1279
    page: codeunit/1279
    type: codeunit
    id: 1279
    name: Cryptography Management Impl.
    app: System Application
    status: modified
objects_unjoined: []
obsoletions: []
backports: []
fixes_issues: []
work_items:
  - 641977
systems:
  - administration
quote: Added [NonDebuggable] to all four affected procedures
joined_against:
  major: "30"
  commit: ecbc028c25dbe83b61313bc566e6c1d41184bb1c
---

# #9291 Add [NonDebuggable] to Cryptography Management encrypt/decrypt procedures

> The Cryptography Management system application now marks all encryption and decryption procedures with the NonDebuggable attribute to prevent AL debugger access to sensitive cleartext data.

[Pull request](https://github.com/microsoft/BCApps/pull/9291) · merged into `main` (BC30) on 2026-07-10 by PooyaKharamesh · 2 files (+4 -0), 2 AL · fix · tier official · reviewed (checked by Opus)

## What changed

- Four procedures in Cryptography Management codeunits receive the NonDebuggable attribute
- EncryptText, Encrypt, and Decrypt procedures are now protected from debugger inspection
- Prevents extraction of cleartext input and return values when procedures return Text instead of SecretText
- Maintains confidentiality of encrypted and decrypted data
- Follows existing System Application conventions for attribute placement
- Behaviour changes for users or extensions.

## AL objects touched

- [Codeunit 1266 "Cryptography Management"](../../objects/codeunit/1266.md), System Application: modified
- [Codeunit 1279 "Cryptography Management Impl."](../../objects/codeunit/1279.md), System Application: modified

## Context

- Work items: AB#641977
- Labels: AL: System Application
- Systems: administration
- From the description: "Added [NonDebuggable] to all four affected procedures"

Source: metadata of a merged pull request in microsoft/BCApps (bcapps): title, labels, changed paths and counts, with a summary in our words. No source text and no description beyond one short quote (D10, D61).