Code:
/ FXUpdate3074 / FXUpdate3074 / 1.1 / DEVDIV / depot / DevDiv / releases / whidbey / QFE / ndp / fx / src / xsp / System / Web / Security / CookieProtection.cs / 1 / CookieProtection.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. // Copyright (c) Microsoft Corporation. All rights reserved. //------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. // Copyright (c) Microsoft Corporation. All rights reserved.
Link Menu

This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- AccessViolationException.cs
- HMACMD5.cs
- ProfileEventArgs.cs
- WebControlsSection.cs
- EmbeddedMailObject.cs
- ellipse.cs
- HwndHost.cs
- Timer.cs
- DataRelationCollection.cs
- QueryStringParameter.cs
- ButtonStandardAdapter.cs
- DbParameterHelper.cs
- TrackingProfile.cs
- DesignerLoader.cs
- ResourceDescriptionAttribute.cs
- DataServiceProviderMethods.cs
- HandleCollector.cs
- StylusPointPropertyInfoDefaults.cs
- ReachNamespaceInfo.cs
- LocationReferenceValue.cs
- SpellCheck.cs
- CodeArrayCreateExpression.cs
- Internal.cs
- TypeSystem.cs
- XmlWhitespace.cs
- Int16Storage.cs
- SimpleBitVector32.cs
- IItemContainerGenerator.cs
- StorageFunctionMapping.cs
- ItemChangedEventArgs.cs
- SqlError.cs
- Resources.Designer.cs
- DefaultValueAttribute.cs
- safelink.cs
- TimelineGroup.cs
- SecUtil.cs
- TreeNodeEventArgs.cs
- LabelEditEvent.cs
- AuthStoreRoleProvider.cs
- StringFunctions.cs
- SchemaNotation.cs
- HashSetDebugView.cs
- VBIdentifierNameEditor.cs
- XmlSchemaType.cs
- SqlDeflator.cs
- MethodBuilder.cs
- ModelTypeConverter.cs
- StyleSelector.cs
- DescendantBaseQuery.cs
- _TimerThread.cs
- GenericTypeParameterBuilder.cs
- DecoderFallback.cs
- ResourcesGenerator.cs
- PropertyGridEditorPart.cs
- InputBinder.cs
- IntranetCredentialPolicy.cs
- MouseGestureConverter.cs
- NetworkInformationException.cs
- TouchesOverProperty.cs
- CodeMemberEvent.cs
- ObjectContext.cs
- MulticastNotSupportedException.cs
- ObjectCacheSettings.cs
- SelectionProviderWrapper.cs
- AppDomainShutdownMonitor.cs
- UnsafeNativeMethodsCLR.cs
- HierarchicalDataSourceControl.cs
- ColumnBinding.cs
- UIElementHelper.cs
- Pair.cs
- GeometryHitTestResult.cs
- ContextBase.cs
- Wizard.cs
- ResourceDefaultValueAttribute.cs
- XmlLinkedNode.cs
- SqlClientWrapperSmiStream.cs
- PrimitiveXmlSerializers.cs
- DesignTableCollection.cs
- WorkflowServiceHost.cs
- CompilationSection.cs
- StateMachineExecutionState.cs
- CharacterString.cs
- SchemaSetCompiler.cs
- WindowsBrush.cs
- MembershipValidatePasswordEventArgs.cs
- WebPartActionVerb.cs
- RemotingSurrogateSelector.cs
- SessionEndedEventArgs.cs
- Win32.cs
- UnmanagedMemoryStream.cs
- Int16KeyFrameCollection.cs
- PathGeometry.cs
- ListManagerBindingsCollection.cs
- UnsafeNativeMethods.cs
- ObjectStateEntryDbUpdatableDataRecord.cs
- ConstructorBuilder.cs
- BufferModesCollection.cs
- FontCollection.cs
- EdmProperty.cs
- FileStream.cs