Code:
/ Dotnetfx_Win7_3.5.1 / Dotnetfx_Win7_3.5.1 / 3.5.1 / DEVDIV / depot / DevDiv / releases / whidbey / NetFXspW7 / ndp / fx / src / xsp / System / Web / Security / CookieProtection.cs / 1 / CookieProtection.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. //------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007.
Link Menu
This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- ToolStripGripRenderEventArgs.cs
- TextModifier.cs
- OrderToken.cs
- RoutedEvent.cs
- FormViewModeEventArgs.cs
- CodeObjectCreateExpression.cs
- InternalsVisibleToAttribute.cs
- ImageDrawing.cs
- ComMethodElementCollection.cs
- Transform.cs
- AppDomainUnloadedException.cs
- MethodToken.cs
- SkipStoryboardToFill.cs
- HttpInputStream.cs
- ItemList.cs
- ScaleTransform.cs
- COM2PropertyBuilderUITypeEditor.cs
- DataGridViewCheckBoxColumn.cs
- MouseButtonEventArgs.cs
- WebPartEditorOkVerb.cs
- TreeNodeCollection.cs
- ComponentCollection.cs
- EnumType.cs
- PrimitiveOperationFormatter.cs
- KnownTypesProvider.cs
- XNodeNavigator.cs
- HatchBrush.cs
- RootDesignerSerializerAttribute.cs
- TextTreeFixupNode.cs
- IncrementalCompileAnalyzer.cs
- ChannelManagerBase.cs
- NavigationWindow.cs
- ItemsControlAutomationPeer.cs
- SqlParameter.cs
- Sequence.cs
- InfoCardClaimCollection.cs
- BufferAllocator.cs
- OptimizedTemplateContent.cs
- TextEditorLists.cs
- IdentityReference.cs
- ObfuscationAttribute.cs
- AuthenticationService.cs
- FormClosingEvent.cs
- XmlParserContext.cs
- Message.cs
- WindowsListBox.cs
- PrivilegeNotHeldException.cs
- SessionStateUtil.cs
- Vector3D.cs
- ConnectionStringSettingsCollection.cs
- TakeQueryOptionExpression.cs
- HtmlHead.cs
- QueryPageSettingsEventArgs.cs
- DetailsViewPagerRow.cs
- formatstringdialog.cs
- CompositionTarget.cs
- PointAnimation.cs
- Hyperlink.cs
- OleDbMetaDataFactory.cs
- TextOnlyOutput.cs
- SchemaImporterExtensionElement.cs
- IisTraceListener.cs
- TextEditorLists.cs
- ParserHooks.cs
- ExtendLockAsyncResult.cs
- LambdaCompiler.Statements.cs
- TextEndOfParagraph.cs
- TextWriter.cs
- TypeInfo.cs
- TableRow.cs
- WsatConfiguration.cs
- CustomError.cs
- StdRegProviderWrapper.cs
- ToolStripDropDown.cs
- SymmetricKeyWrap.cs
- GridItemPattern.cs
- Imaging.cs
- XmlnsCache.cs
- SamlSubjectStatement.cs
- DateTimeParse.cs
- DocumentGrid.cs
- ExpandableObjectConverter.cs
- CompilerResults.cs
- XamlStackWriter.cs
- BufferedOutputStream.cs
- DbReferenceCollection.cs
- RegistryPermission.cs
- FindCriteria.cs
- HwndSourceParameters.cs
- AssemblyBuilder.cs
- ResourceAssociationTypeEnd.cs
- PerfCounterSection.cs
- StylusPointPropertyId.cs
- PathFigureCollectionConverter.cs
- Message.cs
- CodeDirectoryCompiler.cs
- EventLogEntry.cs
- Bind.cs
- SafeCertificateContext.cs
- PropertyPathWorker.cs