Code:
/ Net / Net / 3.5.50727.3053 / DEVDIV / depot / DevDiv / releases / whidbey / netfxsp / ndp / fx / src / xsp / System / Web / Security / CookieProtection.cs / 1 / CookieProtection.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. //------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007.
Link Menu
This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- AddressHeader.cs
- Geometry3D.cs
- BamlStream.cs
- SerialPort.cs
- TraceUtils.cs
- KeyInterop.cs
- ScrollBar.cs
- OleDragDropHandler.cs
- SchemaAttDef.cs
- Imaging.cs
- StackOverflowException.cs
- CommonDialog.cs
- coordinatorfactory.cs
- ComponentResourceManager.cs
- AutomationElement.cs
- CoTaskMemHandle.cs
- LineServicesRun.cs
- ProcessHostFactoryHelper.cs
- DataMemberFieldEditor.cs
- RequestSecurityTokenResponse.cs
- dbenumerator.cs
- ForceCopyBuildProvider.cs
- HScrollBar.cs
- WindowsContainer.cs
- WebPartUtil.cs
- ContextStaticAttribute.cs
- PersistenceException.cs
- remotingproxy.cs
- PkcsUtils.cs
- Rights.cs
- TreeViewImageKeyConverter.cs
- AsyncOperationManager.cs
- LocationSectionRecord.cs
- ShaperBuffers.cs
- CultureInfoConverter.cs
- LogicalCallContext.cs
- XmlDataSourceNodeDescriptor.cs
- HttpWriter.cs
- ProcessThreadCollection.cs
- SocketElement.cs
- TextFindEngine.cs
- EnumBuilder.cs
- TabControlAutomationPeer.cs
- UpdateCompiler.cs
- WebServiceClientProxyGenerator.cs
- HtmlToClrEventProxy.cs
- FontStyleConverter.cs
- XsdCachingReader.cs
- ResourceDictionaryCollection.cs
- EventInfo.cs
- CompatibleComparer.cs
- PageThemeParser.cs
- AppDomainShutdownMonitor.cs
- DomNameTable.cs
- RadioButton.cs
- DataProtectionSecurityStateEncoder.cs
- IconBitmapDecoder.cs
- NaturalLanguageHyphenator.cs
- manifestimages.cs
- DBDataPermissionAttribute.cs
- QEncodedStream.cs
- SqlStream.cs
- BitmapSourceSafeMILHandle.cs
- Cell.cs
- UserCancellationException.cs
- DataObjectSettingDataEventArgs.cs
- GlobalDataBindingHandler.cs
- Utilities.cs
- Rfc2898DeriveBytes.cs
- ActivityCodeGenerator.cs
- SystemIPGlobalProperties.cs
- DropShadowBitmapEffect.cs
- ProfileInfo.cs
- ConfigurationProperty.cs
- RewritingProcessor.cs
- SessionPageStateSection.cs
- ComplexPropertyEntry.cs
- BindToObject.cs
- CmsInterop.cs
- XslAstAnalyzer.cs
- DebugTraceHelper.cs
- Monitor.cs
- PeerUnsafeNativeMethods.cs
- PrivilegedConfigurationManager.cs
- ControlAdapter.cs
- _RegBlobWebProxyDataBuilder.cs
- AssemblySettingAttributes.cs
- StrongNameIdentityPermission.cs
- UserPersonalizationStateInfo.cs
- TTSEngineProxy.cs
- ObjectDataSourceMethodEventArgs.cs
- FormViewDesigner.cs
- ProgressBar.cs
- AttributeCollection.cs
- DeviceContext2.cs
- RegexCapture.cs
- WindowsRebar.cs
- StorageConditionPropertyMapping.cs
- DetailsViewInsertEventArgs.cs
- FormViewDeletedEventArgs.cs