Code:
/ DotNET / DotNET / 8.0 / untmp / whidbey / REDBITS / ndp / fx / src / xsp / System / Web / Security / CookieProtection.cs / 1 / CookieProtection.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } }
Link Menu
This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- MemberPath.cs
- PackageRelationship.cs
- MetaType.cs
- ColorTranslator.cs
- Internal.cs
- DurationConverter.cs
- ParameterModifier.cs
- StandardCommands.cs
- COM2Enum.cs
- OrderedHashRepartitionEnumerator.cs
- TypefaceMetricsCache.cs
- CodeAssignStatement.cs
- Options.cs
- NeutralResourcesLanguageAttribute.cs
- XPathMultyIterator.cs
- TextViewSelectionProcessor.cs
- DesignerTransactionCloseEvent.cs
- StrongNameUtility.cs
- ChannelEndpointElementCollection.cs
- FrameworkRichTextComposition.cs
- TextSegment.cs
- CryptoConfig.cs
- XXXInfos.cs
- EndpointNameMessageFilter.cs
- NetDataContractSerializer.cs
- _Events.cs
- ResponseStream.cs
- OrderPreservingMergeHelper.cs
- TreeView.cs
- SevenBitStream.cs
- DataGridViewIntLinkedList.cs
- ValidatingReaderNodeData.cs
- Compiler.cs
- SmtpLoginAuthenticationModule.cs
- connectionpool.cs
- BordersPage.cs
- EntityDataSourceState.cs
- DataGridViewButtonColumn.cs
- Section.cs
- Int16AnimationBase.cs
- DetailsViewUpdateEventArgs.cs
- FontFamily.cs
- ResXDataNode.cs
- QueryOutputWriter.cs
- DynamicValueConverter.cs
- NonBatchDirectoryCompiler.cs
- EventItfInfo.cs
- SecureUICommand.cs
- XmlAttributeAttribute.cs
- AncillaryOps.cs
- InputMethodStateTypeInfo.cs
- AutomationPropertyInfo.cs
- SpotLight.cs
- Int16Storage.cs
- PrimitiveList.cs
- HttpMethodConstraint.cs
- SerializableAuthorizationContext.cs
- BrushMappingModeValidation.cs
- ContourSegment.cs
- BlurEffect.cs
- NominalTypeEliminator.cs
- TransactionManager.cs
- IndentTextWriter.cs
- EndEvent.cs
- DataTableReader.cs
- Tuple.cs
- BitmapDecoder.cs
- ECDiffieHellmanCngPublicKey.cs
- JapaneseLunisolarCalendar.cs
- PropertyChangedEventArgs.cs
- xamlnodes.cs
- SystemResourceKey.cs
- DrawToolTipEventArgs.cs
- _DomainName.cs
- FunctionDescription.cs
- Rules.cs
- LogPolicy.cs
- Ipv6Element.cs
- DragStartedEventArgs.cs
- TypedTableGenerator.cs
- XmlDataSourceNodeDescriptor.cs
- ProcessModuleCollection.cs
- LabelLiteral.cs
- GradientStop.cs
- Formatter.cs
- WebPartConnectionCollection.cs
- LicenseProviderAttribute.cs
- OleDbInfoMessageEvent.cs
- VisualTreeUtils.cs
- WindowsListViewScroll.cs
- RuntimeConfigurationRecord.cs
- DragAssistanceManager.cs
- TextRangeBase.cs
- TargetControlTypeCache.cs
- XPathMessageFilterElement.cs
- AssemblyCache.cs
- Logging.cs
- filewebresponse.cs
- SectionInput.cs
- ServiceSecurityAuditBehavior.cs