Code:
/ FXUpdate3074 / FXUpdate3074 / 1.1 / DEVDIV / depot / DevDiv / releases / whidbey / QFE / ndp / fx / src / xsp / System / Web / Security / CookieProtection.cs / 1 / CookieProtection.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. // Copyright (c) Microsoft Corporation. All rights reserved. //------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. // Copyright (c) Microsoft Corporation. All rights reserved.
Link Menu
This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- DispatcherObject.cs
- PropertyPushdownHelper.cs
- RawStylusActions.cs
- CodeBlockBuilder.cs
- NetworkAddressChange.cs
- GridViewAutomationPeer.cs
- XmlAnyElementAttribute.cs
- Activity.cs
- QilValidationVisitor.cs
- IgnoreFileBuildProvider.cs
- CodeDirectoryCompiler.cs
- ClientScriptManagerWrapper.cs
- Application.cs
- Rfc2898DeriveBytes.cs
- SystemDiagnosticsSection.cs
- securitymgrsite.cs
- SafeSecurityHelper.cs
- PageFunction.cs
- SoapAttributes.cs
- EntityDataSourceViewSchema.cs
- CompositeCollectionView.cs
- DataSourceExpression.cs
- LambdaCompiler.Logical.cs
- WorkflowServiceAttributes.cs
- PolicyLevel.cs
- ExtensionSurface.cs
- QueryExpression.cs
- XmlSchemaInfo.cs
- SessionStateUtil.cs
- GridViewDeletedEventArgs.cs
- SmiSettersStream.cs
- CellParagraph.cs
- StateMachineSubscription.cs
- AudioFileOut.cs
- EventArgs.cs
- ThrowHelper.cs
- ConstructorNeedsTagAttribute.cs
- SwitchLevelAttribute.cs
- AssemblyCache.cs
- EDesignUtil.cs
- FileUtil.cs
- TTSEngineProxy.cs
- DefinitionUpdate.cs
- AssertUtility.cs
- Decimal.cs
- Line.cs
- HwndHost.cs
- DataFieldConverter.cs
- CodeMemberProperty.cs
- AtomEntry.cs
- LinearGradientBrush.cs
- UnsafePeerToPeerMethods.cs
- DataViewListener.cs
- ComboBoxItem.cs
- ListViewItemSelectionChangedEvent.cs
- ConvertersCollection.cs
- lengthconverter.cs
- GlobalizationSection.cs
- XamlPointCollectionSerializer.cs
- XAMLParseException.cs
- DefaultValueAttribute.cs
- HyperLinkField.cs
- GlobalDataBindingHandler.cs
- StreamInfo.cs
- TimeEnumHelper.cs
- PolyBezierSegmentFigureLogic.cs
- AttributeUsageAttribute.cs
- SchemaExporter.cs
- ImportCatalogPart.cs
- SoapSchemaMember.cs
- FormsAuthenticationUser.cs
- XmlSubtreeReader.cs
- Point4DValueSerializer.cs
- ResourceReferenceExpressionConverter.cs
- ColumnWidthChangingEvent.cs
- ButtonBaseAdapter.cs
- CombinedTcpChannel.cs
- AttributeCallbackBuilder.cs
- ScriptDescriptor.cs
- CaseCqlBlock.cs
- Message.cs
- ObjectToModelValueConverter.cs
- SnapshotChangeTrackingStrategy.cs
- ColumnCollection.cs
- DbConnectionPoolGroupProviderInfo.cs
- Message.cs
- KeyboardEventArgs.cs
- XAMLParseException.cs
- NumberAction.cs
- DocumentPageTextView.cs
- ResourceAttributes.cs
- DrawToolTipEventArgs.cs
- WeakReadOnlyCollection.cs
- MenuItemCollection.cs
- Debugger.cs
- DefaultSettingsSection.cs
- PersonalizableAttribute.cs
- FacetDescription.cs
- ObjectTokenCategory.cs
- ExecutedRoutedEventArgs.cs