Strange error-(WebResource.ax d) CryptographicEx ception: Padding is invalid and cannot be removed.

[Brent K]

Ok, I have an internal intranet website created in visual studio 2005, c#.
It was running fine for months, and then all of the sudden a few days I
started getting these errors emailed to me (I have it set up to email me
exceptions). Here is the error. I have gotten this error probably 100 times
in the last 2 days.

I have googled this error to no avail. My program is not doing any
decrypting, I am not on a web farm, I have reset the web server. The website
is internal, not on internet.

Exception Thrown

Module:
http://intranet/WebResource.axd?d=_9...67410635716438

Exception Information: System.Security .Cryptography.C ryptographicExc eption:
Padding is invalid and cannot be removed.

at System.Security .Cryptography.R ijndaelManagedT ransform.Decryp tData(Byte[]
inputBuffer, Int32 inputOffset, Int32 inputCount, Byte[]& outputBuffer,
Int32 outputOffset, PaddingMode paddingMode, Boolean fLast)

at
System.Security .Cryptography.R ijndaelManagedT ransform.Transf ormFinalBlock(B yte[]
inputBuffer, Int32 inputOffset, Int32 inputCount)

at System.Security .Cryptography.C ryptoStream.Flu shFinalBlock()

at System.Web.Conf iguration.Machi neKeySection.En cryptOrDecryptD ata(Boolean
fEncrypt, Byte[] buf, Byte[] modifier, Int32 start, Int32 length, Boolean
useValidationSy mAlgo)

at System.Web.UI.P age.DecryptStri ng(String s)

at
System.Web.Hand lers.AssemblyRe sourceLoader.Sy stem.Web.IHttpH andler.ProcessR equest(HttpCont ext
context)

at
System.Web.Http Application.Cal lHandlerExecuti onStep.System.W eb.HttpApplicat ion.IExecutionS tep.Execute()

at System.Web.Http Application.Exe cuteStep(IExecu tionStep step, Boolean&
completedSynchr onously)

[bruce barker]

WebResource.axd is a builtin handler that returns resource strings.
asp.net returns javscript and builtin images this way. to keep anyone
from reading any resource string, you pass an encrypted request args
(there is an api to generate this).

because the encryption key is regenerated at startup, a recycle can
cause this error. check the error log for recycle events.

-- bruce (sqlwork.com)

Brent K wrote:

Ok, I have an internal intranet website created in visual studio 2005, c#.
It was running fine for months, and then all of the sudden a few days I
started getting these errors emailed to me (I have it set up to email me
exceptions). Here is the error. I have gotten this error probably 100 times
in the last 2 days.

I have googled this error to no avail. My program is not doing any
decrypting, I am not on a web farm, I have reset the web server. The website
is internal, not on internet.

Exception Thrown

Module:
http://intranet/WebResource.axd?d=_9...67410635716438

Exception Information: System.Security .Cryptography.C ryptographicExc eption:
Padding is invalid and cannot be removed.

at System.Security .Cryptography.R ijndaelManagedT ransform.Decryp tData(Byte[]
inputBuffer, Int32 inputOffset, Int32 inputCount, Byte[]& outputBuffer,
Int32 outputOffset, PaddingMode paddingMode, Boolean fLast)

at
System.Security .Cryptography.R ijndaelManagedT ransform.Transf ormFinalBlock(B yte[]
inputBuffer, Int32 inputOffset, Int32 inputCount)

at System.Security .Cryptography.C ryptoStream.Flu shFinalBlock()

at System.Web.Conf iguration.Machi neKeySection.En cryptOrDecryptD ata(Boolean
fEncrypt, Byte[] buf, Byte[] modifier, Int32 start, Int32 length, Boolean
useValidationSy mAlgo)

at System.Web.UI.P age.DecryptStri ng(String s)

at
System.Web.Hand lers.AssemblyRe sourceLoader.Sy stem.Web.IHttpH andler.ProcessR equest(HttpCont ext
context)

at
System.Web.Http Application.Cal lHandlerExecuti onStep.System.W eb.HttpApplicat ion.IExecutionS tep.Execute()

at System.Web.Http Application.Exe cuteStep(IExecu tionStep step, Boolean&
completedSynchr onously)

[=?Utf-8?B?UGV0ZXIgQnJvbWJlcmcgW0MjIE1WUF0=?=]

The way to solve this issue (mandatory if on a web farm) is not to use the
"autogenerated= true" attribute in the machineKey element. Generate your own
keys and have them specified, they must be the same on every machine.
-- Peter
Site: http://www.eggheadcafe.com
UnBlog: http://petesbloggerama.blogspot.com
BlogMetaFinder( BETA): http://www.blogmetafinder.com

"Brent K" wrote:

Ok, I have an internal intranet website created in visual studio 2005, c#.
It was running fine for months, and then all of the sudden a few days I
started getting these errors emailed to me (I have it set up to email me
exceptions). Here is the error. I have gotten this error probably 100 times
in the last 2 days.

I have googled this error to no avail. My program is not doing any
decrypting, I am not on a web farm, I have reset the web server. The website
is internal, not on internet.

Exception Thrown

Module:
http://intranet/WebResource.axd?d=_9...67410635716438

Exception Information: System.Security .Cryptography.C ryptographicExc eption:
Padding is invalid and cannot be removed.

at System.Security .Cryptography.R ijndaelManagedT ransform.Decryp tData(Byte[]
inputBuffer, Int32 inputOffset, Int32 inputCount, Byte[]& outputBuffer,
Int32 outputOffset, PaddingMode paddingMode, Boolean fLast)

at
System.Security .Cryptography.R ijndaelManagedT ransform.Transf ormFinalBlock(B yte[]
inputBuffer, Int32 inputOffset, Int32 inputCount)

at System.Security .Cryptography.C ryptoStream.Flu shFinalBlock()

at System.Web.Conf iguration.Machi neKeySection.En cryptOrDecryptD ata(Boolean
fEncrypt, Byte[] buf, Byte[] modifier, Int32 start, Int32 length, Boolean
useValidationSy mAlgo)

at System.Web.UI.P age.DecryptStri ng(String s)

at
System.Web.Hand lers.AssemblyRe sourceLoader.Sy stem.Web.IHttpH andler.ProcessR equest(HttpCont ext
context)

at
System.Web.Http Application.Cal lHandlerExecuti onStep.System.W eb.HttpApplicat ion.IExecutionS tep.Execute()

at System.Web.Http Application.Exe cuteStep(IExecu tionStep step, Boolean&
completedSynchr onously)