Code:
/ Net / Net / 3.5.50727.3053 / DEVDIV / depot / DevDiv / releases / whidbey / netfxsp / ndp / fx / src / xsp / System / Web / Security / CookieProtection.cs / 1 / CookieProtection.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. //------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007.
Link Menu
This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- ObjectPersistData.cs
- ComPlusServiceLoader.cs
- NavigationService.cs
- ToolStripTextBox.cs
- MatrixCamera.cs
- DataGridState.cs
- XmlBinaryReader.cs
- CommunicationObjectManager.cs
- CustomCategoryAttribute.cs
- BypassElementCollection.cs
- CodePageEncoding.cs
- CompilationRelaxations.cs
- RegexCharClass.cs
- RequestDescription.cs
- SqlParameterCollection.cs
- SynchronousChannelMergeEnumerator.cs
- OleDbErrorCollection.cs
- PreloadedPackages.cs
- Attributes.cs
- GradientStopCollection.cs
- TemplatePropertyEntry.cs
- KoreanLunisolarCalendar.cs
- RevocationPoint.cs
- AsyncWaitHandle.cs
- ZoneIdentityPermission.cs
- StrokeNodeData.cs
- ClonableStack.cs
- Label.cs
- LiteralControl.cs
- SemaphoreSecurity.cs
- ReliableSessionBindingElement.cs
- ExtentKey.cs
- SimpleTextLine.cs
- EastAsianLunisolarCalendar.cs
- SqlDataReader.cs
- FormParameter.cs
- MemoryMappedFile.cs
- StateValidator.cs
- WsatServiceCertificate.cs
- FlagsAttribute.cs
- ChineseLunisolarCalendar.cs
- CheckBoxFlatAdapter.cs
- ConfigXmlAttribute.cs
- BackStopAuthenticationModule.cs
- FileCodeGroup.cs
- LocalValueEnumerator.cs
- RegexReplacement.cs
- DataTableMappingCollection.cs
- NativeMethodsOther.cs
- ThemeableAttribute.cs
- SmtpDigestAuthenticationModule.cs
- XmlCharType.cs
- DataListItemEventArgs.cs
- EntityContainerEmitter.cs
- BulletedListEventArgs.cs
- DirectoryInfo.cs
- Setter.cs
- EdmConstants.cs
- DataTable.cs
- KeyBinding.cs
- TypeLoadException.cs
- NetworkCredential.cs
- ProvideValueServiceProvider.cs
- SafeEventLogWriteHandle.cs
- Helper.cs
- PermissionSet.cs
- ISessionStateStore.cs
- MultipleCopiesCollection.cs
- TransactionScope.cs
- SafeTimerHandle.cs
- HttpStreamMessage.cs
- HopperCache.cs
- ReaderContextStackData.cs
- XPathNodePointer.cs
- XmlSchemaSimpleTypeList.cs
- CodeTypeParameterCollection.cs
- FormViewModeEventArgs.cs
- TypeBuilder.cs
- ConsumerConnectionPoint.cs
- SqlExpander.cs
- Comparer.cs
- FormsAuthenticationCredentials.cs
- RoleGroupCollection.cs
- Quaternion.cs
- PerformanceCounterCategory.cs
- PrintPageEvent.cs
- URL.cs
- MetadataSource.cs
- BigIntegerStorage.cs
- GCHandleCookieTable.cs
- ReadWriteObjectLock.cs
- ToolStripRendererSwitcher.cs
- SqlFlattener.cs
- MessageBox.cs
- ThemeDictionaryExtension.cs
- RegistrySecurity.cs
- SoapReflector.cs
- TraceSwitch.cs
- ProcessingInstructionAction.cs
- EventEntry.cs