Code:
/ FX-1434 / FX-1434 / 1.0 / untmp / whidbey / REDBITS / ndp / fx / src / xsp / System / Web / Security / CookieProtection.cs / 1 / CookieProtection.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } }
Link Menu
This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- Baml2006KnownTypes.cs
- LocatorGroup.cs
- SwitchAttribute.cs
- XmlSchemaAnnotation.cs
- XmlStreamStore.cs
- CompoundFileDeflateTransform.cs
- WorkflowTerminatedException.cs
- XpsDigitalSignature.cs
- InheritanceRules.cs
- ColumnHeader.cs
- CatalogPart.cs
- LinqDataSourceDeleteEventArgs.cs
- Positioning.cs
- ToolStripItemCollection.cs
- XPathChildIterator.cs
- ExpressionBindings.cs
- Color.cs
- ChtmlCalendarAdapter.cs
- dsa.cs
- InputElement.cs
- SymbolTable.cs
- FilteredDataSetHelper.cs
- Win32.cs
- NetworkCredential.cs
- StringFreezingAttribute.cs
- WebPartConnectVerb.cs
- SafePEFileHandle.cs
- CategoryNameCollection.cs
- Trace.cs
- PerfService.cs
- SynchronizationContextHelper.cs
- TextBox.cs
- ProviderMetadataCachedInformation.cs
- CapacityStreamGeometryContext.cs
- _TransmitFileOverlappedAsyncResult.cs
- ExpressionHelper.cs
- Random.cs
- RsaSecurityKey.cs
- InputProcessorProfilesLoader.cs
- StrokeNodeData.cs
- OracleFactory.cs
- XmlNode.cs
- ImageEditor.cs
- Mappings.cs
- DeclarationUpdate.cs
- SeparatorAutomationPeer.cs
- DataGridViewBand.cs
- ServerProtocol.cs
- UniqueIdentifierService.cs
- ToolStripPanelRow.cs
- SafeCryptContextHandle.cs
- ReadonlyMessageFilter.cs
- TextChangedEventArgs.cs
- FreezableDefaultValueFactory.cs
- TextTreePropertyUndoUnit.cs
- TextSchema.cs
- AdRotator.cs
- Model3D.cs
- SiteMap.cs
- CapabilitiesSection.cs
- BamlRecordWriter.cs
- Predicate.cs
- FlowLayoutSettings.cs
- FileDialog_Vista_Interop.cs
- StorageMappingItemCollection.cs
- ObjectQueryExecutionPlan.cs
- EntitySqlQueryState.cs
- DataControlImageButton.cs
- UInt32Converter.cs
- IgnorePropertiesAttribute.cs
- Vars.cs
- Timer.cs
- NestPullup.cs
- TextStore.cs
- ReflectionPermission.cs
- exports.cs
- GridViewColumnCollectionChangedEventArgs.cs
- Authorization.cs
- DataServiceQueryOfT.cs
- CollectionBase.cs
- TextEndOfSegment.cs
- BamlResourceSerializer.cs
- AsymmetricKeyExchangeFormatter.cs
- RegisteredArrayDeclaration.cs
- DataGridViewSelectedCellsAccessibleObject.cs
- SchemaAttDef.cs
- MatrixStack.cs
- DataServiceKeyAttribute.cs
- Range.cs
- Choices.cs
- ConfigurationManager.cs
- Schema.cs
- PolyBezierSegment.cs
- ListViewCancelEventArgs.cs
- PageRanges.cs
- HtmlInputSubmit.cs
- OleDbEnumerator.cs
- StreamReader.cs
- EdmToObjectNamespaceMap.cs
- XmlQuerySequence.cs