Code:
/ Dotnetfx_Vista_SP2 / Dotnetfx_Vista_SP2 / 8.0.50727.4016 / DEVDIV / depot / DevDiv / releases / whidbey / NetFxQFE / ndp / fx / src / xsp / System / Web / Security / CookieProtection.cs / 1 / CookieProtection.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. //------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007.
Link Menu
This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- GridViewEditEventArgs.cs
- ButtonAutomationPeer.cs
- CRYPTPROTECT_PROMPTSTRUCT.cs
- BamlLocalizer.cs
- ShaderRenderModeValidation.cs
- ReadOnlyDataSource.cs
- MaskedTextProvider.cs
- CalendarTable.cs
- DbConnectionInternal.cs
- FullTrustAssembly.cs
- TemplateContainer.cs
- ConfigurationManagerInternalFactory.cs
- OutputBuffer.cs
- SessionSwitchEventArgs.cs
- SafeNativeMethods.cs
- CheckBox.cs
- WebPart.cs
- ServiceDesigner.cs
- Emitter.cs
- RecognizerStateChangedEventArgs.cs
- MenuTracker.cs
- backend.cs
- ObjectRef.cs
- GridViewSelectEventArgs.cs
- DirectionalLight.cs
- Stylus.cs
- CustomMenuItemCollection.cs
- SiteMapNodeItemEventArgs.cs
- Int32AnimationBase.cs
- HttpResponse.cs
- HttpCapabilitiesEvaluator.cs
- DispatchWrapper.cs
- RoutedCommand.cs
- Journal.cs
- ExpressionEditorAttribute.cs
- BitmapFrameEncode.cs
- LayoutManager.cs
- InputLanguageProfileNotifySink.cs
- DataIdProcessor.cs
- Timer.cs
- DebugController.cs
- ListViewItemMouseHoverEvent.cs
- StorageEndPropertyMapping.cs
- ContextItem.cs
- SqlDelegatedTransaction.cs
- EventLogPermissionAttribute.cs
- XamlTypeMapperSchemaContext.cs
- UpDownBase.cs
- EncryptedXml.cs
- WorkflowServiceHostFactory.cs
- ResumeStoryboard.cs
- IsolatedStorage.cs
- EventDescriptor.cs
- WhitespaceRule.cs
- DataServiceExpressionVisitor.cs
- OdbcError.cs
- KerberosReceiverSecurityToken.cs
- TreeNodeConverter.cs
- Collection.cs
- SerializableAuthorizationContext.cs
- LicenseContext.cs
- DesigntimeLicenseContextSerializer.cs
- XmlNamedNodeMap.cs
- CompilerScope.Storage.cs
- CategoryAttribute.cs
- FullTextBreakpoint.cs
- VBIdentifierName.cs
- LoginUtil.cs
- mactripleDES.cs
- DataGridDesigner.cs
- MeasureItemEvent.cs
- BasicViewGenerator.cs
- SoapIncludeAttribute.cs
- SafeBitVector32.cs
- Rfc2898DeriveBytes.cs
- ELinqQueryState.cs
- DoubleLinkListEnumerator.cs
- LocalFileSettingsProvider.cs
- XmlJsonReader.cs
- ImageCodecInfo.cs
- FileUpload.cs
- XsltConvert.cs
- ArraySortHelper.cs
- GlobalizationSection.cs
- OleDbErrorCollection.cs
- Span.cs
- XsltLibrary.cs
- MailAddressParser.cs
- LogWriteRestartAreaState.cs
- InvokeMethodActivityDesigner.cs
- TimelineGroup.cs
- SoundPlayerAction.cs
- SmtpNtlmAuthenticationModule.cs
- DataRow.cs
- AutoFocusStyle.xaml.cs
- ResourceContainerWrapper.cs
- ScrollViewer.cs
- ItemChangedEventArgs.cs
- UpdateTracker.cs
- NestPullup.cs