Code:
/ DotNET / DotNET / 8.0 / untmp / whidbey / REDBITS / ndp / fx / src / xsp / System / Web / Security / CookieProtection.cs / 1 / CookieProtection.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } }
Link Menu
This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- DynamicDataResources.Designer.cs
- UriScheme.cs
- MessageContractAttribute.cs
- FirstMatchCodeGroup.cs
- ChtmlMobileTextWriter.cs
- DesignBindingEditor.cs
- Point4D.cs
- PropertyTab.cs
- Metadata.cs
- XhtmlConformanceSection.cs
- SpeechSynthesizer.cs
- ResourceReader.cs
- ConnectionPoint.cs
- TraceHandler.cs
- SafeCryptHandles.cs
- AnonymousIdentificationModule.cs
- Model3DGroup.cs
- Parser.cs
- _HeaderInfo.cs
- DES.cs
- WaitHandleCannotBeOpenedException.cs
- SymbolMethod.cs
- OptionalMessageQuery.cs
- Viewport2DVisual3D.cs
- Timer.cs
- SafeNativeMethods.cs
- VScrollBar.cs
- HttpApplication.cs
- TileBrush.cs
- SystemEvents.cs
- ImageInfo.cs
- ZoneIdentityPermission.cs
- StdValidatorsAndConverters.cs
- storepermissionattribute.cs
- FormsIdentity.cs
- HtmlValidationSummaryAdapter.cs
- TextDecoration.cs
- ComponentCommands.cs
- FilteredSchemaElementLookUpTable.cs
- UpdateTranslator.cs
- Soap12ServerProtocol.cs
- FullTrustAssemblyCollection.cs
- BinHexEncoder.cs
- CommandSet.cs
- UnauthorizedAccessException.cs
- IODescriptionAttribute.cs
- FrameworkContentElement.cs
- SqlDataSourceCommandEventArgs.cs
- ChangeInterceptorAttribute.cs
- DataGridViewCheckBoxColumn.cs
- Win32.cs
- SortAction.cs
- BigInt.cs
- ScriptReferenceBase.cs
- TimeSpanStorage.cs
- KeyGesture.cs
- DecimalKeyFrameCollection.cs
- DesignerProperties.cs
- ResXFileRef.cs
- SchemaCollectionPreprocessor.cs
- CalendarButtonAutomationPeer.cs
- RolePrincipal.cs
- Behavior.cs
- DisplayMemberTemplateSelector.cs
- DomNameTable.cs
- IgnoreSection.cs
- RawStylusInput.cs
- LightweightCodeGenerator.cs
- Int32Storage.cs
- DebugView.cs
- ADMembershipUser.cs
- ChannelBuilder.cs
- HttpMethodConstraint.cs
- MessageHeaderDescriptionCollection.cs
- DateTimePicker.cs
- Lasso.cs
- LinqDataSourceStatusEventArgs.cs
- SystemIPGlobalProperties.cs
- BitmapEffectDrawingContextState.cs
- Matrix3DConverter.cs
- HtmlHistory.cs
- XmlSchemaObject.cs
- HashLookup.cs
- TerminateWorkflow.cs
- XmlSchemaElement.cs
- AlternateViewCollection.cs
- RepeaterItem.cs
- TypeNameConverter.cs
- DrawingVisual.cs
- IPPacketInformation.cs
- AspNetCacheProfileAttribute.cs
- MenuTracker.cs
- CodeMemberMethod.cs
- SQLDecimal.cs
- sqlmetadatafactory.cs
- SnapLine.cs
- PathStreamGeometryContext.cs
- FlowDocumentReaderAutomationPeer.cs
- LocalizabilityAttribute.cs
- SoapAttributeAttribute.cs