Internal.Cryptography.CryptoThrowHelper+WindowsCryptographicException: Cryptography error
   at Internal.NativeCrypto.CapiHelper.CreateProvHandle(CspParameters parameters, Boolean randomKeyContainer)
   at System.Security.Cryptography.Gost3410_2012_256CryptoServiceProvider.get_SafeProvHandle()
   at System.Security.Cryptography.Gost3410_2012_256CryptoServiceProvider.get_SafeKeyHandle()
   at System.Security.Cryptography.Gost3410_2012_256CryptoServiceProvider.GetKeyPair()
   at System.Security.Cryptography.Gost3410_2012_256CryptoServiceProvider..ctor(CspParameters parameters)
   at Internal.Cryptography.Pal.Windows.PkcsPalWindows.GetPrivateKey[T](X509Certificate2 certificate, Boolean silent, Boolean preferNCrypt)
   at Internal.Cryptography.Pal.Windows.PkcsPalWindows.GetPrivateKeyForSigning[T](X509Certificate2 certificate, Boolean silent)
   at System.Security.Cryptography.Pkcs.CmsSignature.Gost2012_256CmsSignature.Sign(ReadOnlySpan`1 dataHash, HashAlgorithmName hashAlgorithmName, X509Certificate2 certificate, AsymmetricAlgorithm key, Boolean silent, Oid& signatureAlgorithm, Byte[]& signatureValue)
   at System.Security.Cryptography.Pkcs.CmsSignature.Sign(ReadOnlySpan`1 dataHash, HashAlgorithmName hashAlgorithmName, X509Certificate2 certificate, AsymmetricAlgorithm key, Boolean silent, Oid& oid, ReadOnlyMemory`1& signatureValue)
   at System.Security.Cryptography.Pkcs.CmsSigner.Sign(ReadOnlyMemory`1 data, String contentTypeOid, Boolean silent, X509Certificate2Collection& chainCerts)
   at System.Security.Cryptography.Pkcs.SignedCms.ComputeSignature(CmsSigner signer, Boolean silent)
   at MedInfoCenter.CryptoApi.Controllers.DetachedSignatureController.ComputeSignature(ComputeSignatureRequest computeSignatureRequest, String thumbprint) in 
...

            using (var gostCert = _certificateRepository.FindCertificate(thumbprint))
            {
                if (gostCert == null)
                {
                    return BadRequest("Сертификат не найден");
                }

                using (var currentUserStore = new X509Store(StoreLocation.CurrentUser))
                {
                    currentUserStore.Open(OpenFlags.ReadOnly);
                    var contentInfo = new ContentInfo(rawData);
                    var signedCms = new SignedCms(contentInfo, true);
                    var cmsSigner = new CmsSigner(gostCert);
                    signedCms.ComputeSignature(cmsSigner, true);

                    return Ok(new { Signature = signedCms.Encode() });
                }
            }

public X509Certificate2 FindCertificate(string thumbprint)
        {
            if (thumbprint == null) throw new ArgumentNullException(nameof(thumbprint));

            var sanitizedThumbprint = new string(thumbprint.Where(char.IsLetterOrDigit).Select(char.ToUpper).ToArray());

            using (var currentUserStore = new X509Store(StoreLocation.CurrentUser))
            {
                currentUserStore.Open(OpenFlags.ReadOnly);

                return currentUserStore.Certificates
                                       .OfType<X509Certificate2>()
                                       .SingleOrDefault(x => x.Thumbprint == sanitizedThumbprint);
            }
        }

           var symmetric = new CryptoPro.Sharpei.Gost28147CryptoServiceProvider();

           symmetric.GenerateKey();
            

        public override void GenerateKey()
        {
            CapiHelper.GenerateKey(SafeProvHandle,
                GostConstants.CALG_G28147, CspProviderFlags.NoFlags,
                GostConstants.G28147_KEYLEN * BitsPerByte, out _safeKeyHandle);
            KeyValue = null;
            KeySizeValue = GostConstants.G28147_KEYLEN * BitsPerByte;
        }

           _gostParamSet.DigestParamSet = "1.2.643.7.1.1.2.2";
            _gostParamSet.PublicKeyParamSet = "1.2.643.2.2.36.0";

            Gost3410_2012_256EphemeralCryptoServiceProvider sender = new Gost3410_2012_256EphemeralCryptoServiceProvider(_gostParamSet);
            var exportedParameters = sender.ExportParameters(true);