Code:
/ Dotnetfx_Win7_3.5.1 / Dotnetfx_Win7_3.5.1 / 3.5.1 / DEVDIV / depot / DevDiv / releases / whidbey / NetFXspW7 / ndp / fx / src / xsp / System / Web / Security / CookieProtection.cs / 1 / CookieProtection.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. //------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007.
Link Menu
This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- LoginNameDesigner.cs
- PolicyStatement.cs
- HtmlTextArea.cs
- DynamicValidatorEventArgs.cs
- ChildTable.cs
- COM2PropertyBuilderUITypeEditor.cs
- TypeDescriptionProvider.cs
- SafeSystemMetrics.cs
- MouseActionValueSerializer.cs
- DateBoldEvent.cs
- DataControlFieldTypeEditor.cs
- AsymmetricAlgorithm.cs
- LinkDescriptor.cs
- StringKeyFrameCollection.cs
- InstancePersistenceException.cs
- XmlIterators.cs
- SecurityVerifiedMessage.cs
- StreamWriter.cs
- WebPartHelpVerb.cs
- IntSecurity.cs
- SystemTcpStatistics.cs
- Models.cs
- ImplicitInputBrush.cs
- ISAPIApplicationHost.cs
- TraceContextEventArgs.cs
- TileBrush.cs
- JoinGraph.cs
- TextTreeRootTextBlock.cs
- IntSecurity.cs
- Label.cs
- Model3DGroup.cs
- ExpressionBindingCollection.cs
- RelationshipConverter.cs
- XmlTextWriter.cs
- Converter.cs
- Exceptions.cs
- ListBoxChrome.cs
- FixedFindEngine.cs
- input.cs
- Point4D.cs
- VisualTreeUtils.cs
- Comparer.cs
- MultiView.cs
- RichTextBoxConstants.cs
- SqlCommandSet.cs
- DefaultValueTypeConverter.cs
- FormViewRow.cs
- SortedList.cs
- SmtpSection.cs
- DoubleConverter.cs
- PkcsUtils.cs
- SqlMethodAttribute.cs
- ArithmeticException.cs
- DataGridViewRowCancelEventArgs.cs
- CodeMemberField.cs
- PointConverter.cs
- HMACSHA1.cs
- CodeDelegateInvokeExpression.cs
- CqlParser.cs
- oledbmetadatacolumnnames.cs
- controlskin.cs
- MetadataPropertyCollection.cs
- InputLanguageManager.cs
- CompiledRegexRunner.cs
- XslAst.cs
- _HelperAsyncResults.cs
- SoapProtocolImporter.cs
- ModelService.cs
- ValidationSettings.cs
- OneOf.cs
- Win32SafeHandles.cs
- VisualTreeHelper.cs
- DropDownButton.cs
- ValidationPropertyAttribute.cs
- CompositeCollection.cs
- EditorBrowsableAttribute.cs
- QueryInterceptorAttribute.cs
- ScrollItemPattern.cs
- WrapperSecurityCommunicationObject.cs
- ModelTypeConverter.cs
- OSEnvironmentHelper.cs
- safelinkcollection.cs
- DataBindingValueUIHandler.cs
- VirtualPathProvider.cs
- StateManagedCollection.cs
- OleDbStruct.cs
- Empty.cs
- IPGlobalProperties.cs
- StylusPoint.cs
- XmlNodeChangedEventArgs.cs
- ScriptResourceAttribute.cs
- UIElementPropertyUndoUnit.cs
- ObjectContext.cs
- PathSegment.cs
- ExtensibleClassFactory.cs
- ToolboxItemAttribute.cs
- WorkflowDataContext.cs
- AdRotator.cs
- RowCache.cs
- FreezableDefaultValueFactory.cs