Code:
/ DotNET / DotNET / 8.0 / untmp / whidbey / REDBITS / ndp / fx / src / xsp / System / Web / Security / CookieProtection.cs / 1 / CookieProtection.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } }
Link Menu
This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- TextEditorSelection.cs
- StylusSystemGestureEventArgs.cs
- COM2TypeInfoProcessor.cs
- ArraySet.cs
- NativeMethods.cs
- Size.cs
- Matrix3DStack.cs
- GestureRecognizer.cs
- TableSectionStyle.cs
- sqlnorm.cs
- DetailsViewRow.cs
- AmbiguousMatchException.cs
- UnmanagedHandle.cs
- BaseTemplateBuildProvider.cs
- EntityTypeEmitter.cs
- NamedObject.cs
- Animatable.cs
- InteropBitmapSource.cs
- AnnotationHighlightLayer.cs
- SystemUdpStatistics.cs
- FigureParaClient.cs
- PartitionResolver.cs
- RangeValidator.cs
- wgx_sdk_version.cs
- HMACSHA384.cs
- InputLangChangeRequestEvent.cs
- TreeViewEvent.cs
- BuildProviderAppliesToAttribute.cs
- ExpressionDumper.cs
- MulticastIPAddressInformationCollection.cs
- SiteIdentityPermission.cs
- ValidationEventArgs.cs
- WSFederationHttpSecurityMode.cs
- XmlSchemaDocumentation.cs
- Zone.cs
- CngKey.cs
- PeerNameResolver.cs
- EnumMember.cs
- AttributeConverter.cs
- ApplicationSecurityManager.cs
- MatrixKeyFrameCollection.cs
- Command.cs
- SearchExpression.cs
- Slider.cs
- Schema.cs
- BufferedReadStream.cs
- IdentityNotMappedException.cs
- _Rfc2616CacheValidators.cs
- BaseCodePageEncoding.cs
- NetworkInterface.cs
- GenericNameHandler.cs
- SQLSingle.cs
- RowParagraph.cs
- WeakReferenceEnumerator.cs
- ChannelToken.cs
- CultureInfo.cs
- TreeNodeSelectionProcessor.cs
- Attachment.cs
- SqlDeflator.cs
- DocumentSchemaValidator.cs
- RNGCryptoServiceProvider.cs
- WebPartDescription.cs
- WindowCollection.cs
- translator.cs
- PropertyDescriptorComparer.cs
- ListViewContainer.cs
- BitmapEffectDrawingContextWalker.cs
- CodeAccessSecurityEngine.cs
- _LoggingObject.cs
- FixedSOMSemanticBox.cs
- BufferedGraphics.cs
- InheritanceAttribute.cs
- XmlILConstructAnalyzer.cs
- VsPropertyGrid.cs
- RuntimeUtils.cs
- DataControlExtensions.cs
- RoutedEvent.cs
- securitycriticaldataClass.cs
- ProviderConnectionPointCollection.cs
- ReadOnlyAttribute.cs
- Int16AnimationUsingKeyFrames.cs
- ContentElement.cs
- HelloMessageApril2005.cs
- ListViewHitTestInfo.cs
- AppSecurityManager.cs
- ToolStripScrollButton.cs
- Directory.cs
- AutomationPropertyInfo.cs
- SessionEndedEventArgs.cs
- GenericUI.cs
- ExpressionEditor.cs
- SystemResourceKey.cs
- ObjectNotFoundException.cs
- MembershipValidatePasswordEventArgs.cs
- DataContractJsonSerializerOperationFormatter.cs
- CheckBox.cs
- ParallelSeparator.xaml.cs
- StateRuntime.cs
- RelatedPropertyManager.cs
- DynamicILGenerator.cs