Code:
/ FXUpdate3074 / FXUpdate3074 / 1.1 / DEVDIV / depot / DevDiv / releases / whidbey / QFE / ndp / fx / src / xsp / System / Web / Security / CookieProtection.cs / 1 / CookieProtection.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. // Copyright (c) Microsoft Corporation. All rights reserved. //------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. // Copyright (c) Microsoft Corporation. All rights reserved.
Link Menu

This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- ObjectDataSourceDisposingEventArgs.cs
- TextWriterTraceListener.cs
- RoleManagerEventArgs.cs
- FixedStringLookup.cs
- RuntimeIdentifierPropertyAttribute.cs
- Ipv6Element.cs
- AnimatedTypeHelpers.cs
- RootBuilder.cs
- DrawingGroup.cs
- TemplateApplicationHelper.cs
- WindowPatternIdentifiers.cs
- KeyFrames.cs
- UnitySerializationHolder.cs
- ConstraintEnumerator.cs
- HttpModuleCollection.cs
- XmlDigitalSignatureProcessor.cs
- CodeNamespaceCollection.cs
- MetadataCache.cs
- ContextDataSource.cs
- GeneralTransformGroup.cs
- CalendarDesigner.cs
- hresults.cs
- HostSecurityManager.cs
- ByteStreamMessageEncoderFactory.cs
- XmlILOptimizerVisitor.cs
- RenamedEventArgs.cs
- StorageScalarPropertyMapping.cs
- WebBrowserUriTypeConverter.cs
- ConfigXmlCDataSection.cs
- BitStack.cs
- XmlCharCheckingWriter.cs
- SessionStateContainer.cs
- ToolStripItemTextRenderEventArgs.cs
- TypeUsageBuilder.cs
- HighlightVisual.cs
- Char.cs
- LinkLabelLinkClickedEvent.cs
- FontUnit.cs
- DrawingAttributesDefaultValueFactory.cs
- Semaphore.cs
- SettingsPropertyNotFoundException.cs
- BaseDataList.cs
- DataContractSet.cs
- TokenCreationException.cs
- ReaderWriterLock.cs
- CacheDict.cs
- ISCIIEncoding.cs
- PerformanceCounterManager.cs
- WebPartVerb.cs
- SettingsPropertyCollection.cs
- ParentUndoUnit.cs
- XPathNode.cs
- SemaphoreFullException.cs
- ResolveCriteriaCD1.cs
- KeyFrames.cs
- RouteParameter.cs
- PageFunction.cs
- RegistrationServices.cs
- ListViewDesigner.cs
- CalendarDateRangeChangingEventArgs.cs
- XmlUtf8RawTextWriter.cs
- FigureHelper.cs
- HttpConfigurationContext.cs
- loginstatus.cs
- SoapInteropTypes.cs
- SHA512Managed.cs
- ConnectionInterfaceCollection.cs
- KeyValueConfigurationElement.cs
- WebHostScriptMappingsInstallComponent.cs
- StateElement.cs
- AttachedPropertyDescriptor.cs
- CommandBinding.cs
- TemplateComponentConnector.cs
- BitmapCacheBrush.cs
- entityreference_tresulttype.cs
- EntityKey.cs
- OdbcParameterCollection.cs
- ListDictionaryInternal.cs
- PeerApplication.cs
- COM2ExtendedUITypeEditor.cs
- XmlWriterDelegator.cs
- OrderedHashRepartitionStream.cs
- columnmapkeybuilder.cs
- LOSFormatter.cs
- ListBoxItem.cs
- BaseValidator.cs
- TextEditorParagraphs.cs
- SmtpException.cs
- XmlKeywords.cs
- LinqDataSourceDeleteEventArgs.cs
- wgx_render.cs
- ContextMenuService.cs
- SqlDependencyListener.cs
- Color.cs
- Helper.cs
- SqlFunctionAttribute.cs
- OpCodes.cs
- TrayIconDesigner.cs
- UnhandledExceptionEventArgs.cs
- ExclusiveCanonicalizationTransform.cs