TicketManager is not a general purpose framework. It’s a no nonsense, lightweight and elegant .NET library to manage authentication tickets, content protection and data signing.
TicketManager uses highly optimized AES256 and HMAC-SHA256 implementations and caches expended keys in memory. The manager is completely stateless, allows multiple calls to be issued concurrently and achieves ridiculously high throughput on multi-core CPUs. Each function itself is optimized to allocate as little memory as possible for all required structures in a single call to allocator. The tiny Goletas.Core DLL is the cornerstone of the TicketManager and is compiled to a native binary with no dependencies on clib or any other runtime libraries besides Windows Kernel. This allows for precise memory control, fast calls to CryptGenRandom and low overhead pointer arithmetic.
TicketManager takes care of timing attacks and padding oracle attacks. It also supports multiple encryption and signing keys in the config file for key rotation. The manager is designed to be used in web services and web apps.
Get a copy and check it out if it suits your needs.
Download: TicketManager-1.0.0.0.zip (245 KB) released on Aug 23, 2011. Code doc is here.
The zip archive contains builds for x86 and x64 Windows platforms, documentation, sample config and license agreement. The binaries are signed with strong-name and Authenticode by Maksim Goleta.