#if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR)
#pragma warning disable
using System;
namespace BestHTTP.SecureProtocol.Org.BouncyCastle.Tls
{
/**
* RFC 4347 4.1.2.5 Anti-replay
*
* Support fast rejection of duplicate records by maintaining a sliding receive window
*
*/
internal sealed class DtlsReplayWindow
{
private const long ValidSeqMask = 0x0000FFFFFFFFFFFFL;
private const long WindowSize = 64L;
private long m_latestConfirmedSeq = -1;
private ulong m_bitmap = 0;
/// Check whether a received record with the given sequence number should be rejected as a duplicate.
///
/// the 48-bit DTLSPlainText.sequence_number field of a received record.
/// true if the record should be discarded without further processing.
internal bool ShouldDiscard(long seq)
{
if ((seq & ValidSeqMask) != seq)
return true;
if (seq <= m_latestConfirmedSeq)
{
long diff = m_latestConfirmedSeq - seq;
if (diff >= WindowSize)
return true;
if ((m_bitmap & (1UL << (int)diff)) != 0)
return true;
}
return false;
}
/// Report that a received record with the given sequence number passed authentication checks.
///
/// the 48-bit DTLSPlainText.sequence_number field of an authenticated record.
internal void ReportAuthenticated(long seq)
{
if ((seq & ValidSeqMask) != seq)
throw new ArgumentException("out of range", "seq");
if (seq <= m_latestConfirmedSeq)
{
long diff = m_latestConfirmedSeq - seq;
if (diff < WindowSize)
{
m_bitmap |= (1UL << (int)diff);
}
}
else
{
long diff = seq - m_latestConfirmedSeq;
if (diff >= WindowSize)
{
m_bitmap = 1;
}
else
{
m_bitmap <<= (int)diff; // for earlier JDKs
m_bitmap |= 1UL;
}
m_latestConfirmedSeq = seq;
}
}
internal void Reset(long seq)
{
if ((seq & ValidSeqMask) != seq)
throw new ArgumentException("out of range", "seq");
// Discard future records unless sequence number > 'seq'
m_latestConfirmedSeq = seq;
m_bitmap = ulong.MaxValue >> (int)System.Math.Max(0, 63 - seq);
}
}
}
#pragma warning restore
#endif