Code:
/ Dotnetfx_Win7_3.5.1 / Dotnetfx_Win7_3.5.1 / 3.5.1 / DEVDIV / depot / DevDiv / releases / whidbey / NetFXspW7 / ndp / fx / src / xsp / System / Web / Security / CookieProtection.cs / 1 / CookieProtection.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. //------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007.
Link Menu
This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- EventLogPermission.cs
- VisualTreeUtils.cs
- ContextMenu.cs
- HtmlPageAdapter.cs
- XamlUtilities.cs
- ExpressionCopier.cs
- MdiWindowListItemConverter.cs
- RequestStatusBarUpdateEventArgs.cs
- TreeNode.cs
- XmlSchemaComplexType.cs
- AttributeXamlType.cs
- TemplateContent.cs
- StaticExtensionConverter.cs
- EntityStoreSchemaGenerator.cs
- DictionaryMarkupSerializer.cs
- iisPickupDirectory.cs
- GraphicsPath.cs
- WsdlInspector.cs
- CriticalExceptions.cs
- PublisherMembershipCondition.cs
- TextElement.cs
- StringHandle.cs
- DesignObjectWrapper.cs
- SchemaTypeEmitter.cs
- HMACSHA512.cs
- TabControlAutomationPeer.cs
- TrackingLocation.cs
- SystemResources.cs
- CompositeCollectionView.cs
- AutomationFocusChangedEventArgs.cs
- CompilationSection.cs
- CommonRemoteMemoryBlock.cs
- AppDomainProtocolHandler.cs
- FactoryGenerator.cs
- HttpWebResponse.cs
- RadioButtonFlatAdapter.cs
- BookmarkScopeInfo.cs
- CrossContextChannel.cs
- DefaultMemberAttribute.cs
- VariableBinder.cs
- TextBreakpoint.cs
- ServiceDescription.cs
- IfJoinedCondition.cs
- SqlResolver.cs
- WhitespaceRuleReader.cs
- SQLDoubleStorage.cs
- Frame.cs
- UnsettableComboBox.cs
- ObjectMemberMapping.cs
- DataGridCell.cs
- ProcessThread.cs
- HealthMonitoringSection.cs
- DatatypeImplementation.cs
- UnsafeNativeMethods.cs
- ApplicationInfo.cs
- DataGridRowHeaderAutomationPeer.cs
- HtmlMeta.cs
- TileBrush.cs
- XmlEntity.cs
- ContentHostHelper.cs
- SupportsEventValidationAttribute.cs
- CheckedListBox.cs
- TranslateTransform3D.cs
- Registry.cs
- Pair.cs
- WarningException.cs
- Misc.cs
- XmlAttributeProperties.cs
- WindowsToolbarItemAsMenuItem.cs
- SafeSystemMetrics.cs
- ArrayTypeMismatchException.cs
- SchemaElementDecl.cs
- CodeDOMProvider.cs
- CompilerScope.cs
- EventToken.cs
- TableCell.cs
- FontDifferentiator.cs
- RuleSettingsCollection.cs
- XmlBuffer.cs
- PackUriHelper.cs
- EdmPropertyAttribute.cs
- TdsEnums.cs
- FullTextState.cs
- ErrorLog.cs
- IPPacketInformation.cs
- FixedSOMTableCell.cs
- AutoResizedEvent.cs
- BufferedGraphicsContext.cs
- RegisteredHiddenField.cs
- EncodingTable.cs
- CursorConverter.cs
- SoapHeaderException.cs
- SpecialFolderEnumConverter.cs
- DataGridViewRowHeaderCell.cs
- NumberFunctions.cs
- SafeNativeMethodsCLR.cs
- MethodToken.cs
- BeginStoryboard.cs
- DispatcherEventArgs.cs
- WSHttpBindingBase.cs