Code:
/ Dotnetfx_Win7_3.5.1 / Dotnetfx_Win7_3.5.1 / 3.5.1 / DEVDIV / depot / DevDiv / releases / whidbey / NetFXspW7 / ndp / fx / src / xsp / System / Web / Security / CookieProtection.cs / 1 / CookieProtection.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. //------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007.
Link Menu
This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- ComponentRenameEvent.cs
- EntityObject.cs
- Module.cs
- TextTrailingCharacterEllipsis.cs
- ProjectionPruner.cs
- Privilege.cs
- DBConnectionString.cs
- TextShapeableCharacters.cs
- Point3DCollectionConverter.cs
- XmlFormatWriterGenerator.cs
- ByteAnimationBase.cs
- CodeMethodReturnStatement.cs
- util.cs
- WSHttpBindingBase.cs
- CheckedPointers.cs
- NamedPipeHostedTransportConfiguration.cs
- FileLogRecordHeader.cs
- IsolatedStorageException.cs
- RectAnimation.cs
- ZipIOEndOfCentralDirectoryBlock.cs
- TableAutomationPeer.cs
- OrthographicCamera.cs
- NavigationEventArgs.cs
- BindingUtils.cs
- Decoder.cs
- DeflateEmulationStream.cs
- TaiwanCalendar.cs
- SqlClientPermission.cs
- Stack.cs
- GorillaCodec.cs
- DictionarySectionHandler.cs
- _TLSstream.cs
- webeventbuffer.cs
- WebEvents.cs
- HealthMonitoringSection.cs
- SystemBrushes.cs
- RecordManager.cs
- StreamingContext.cs
- Size.cs
- DataColumnMappingCollection.cs
- Light.cs
- SchemaContext.cs
- LinqExpressionNormalizer.cs
- Oid.cs
- XmlNode.cs
- EntityCommandDefinition.cs
- HTTPNotFoundHandler.cs
- TextEditorTables.cs
- CompositeActivityTypeDescriptorProvider.cs
- EncoderReplacementFallback.cs
- mediaeventargs.cs
- WebPartTransformer.cs
- RequestTimeoutManager.cs
- CLSCompliantAttribute.cs
- CalendarDay.cs
- PathSegmentCollection.cs
- SQLDecimalStorage.cs
- Win32KeyboardDevice.cs
- ApplicationContext.cs
- MethodToken.cs
- PropertiesTab.cs
- ConsoleKeyInfo.cs
- CurrentChangingEventArgs.cs
- MessageFault.cs
- ButtonPopupAdapter.cs
- UTF32Encoding.cs
- BookmarkScopeHandle.cs
- ControlAdapter.cs
- EditorResources.cs
- UserControlCodeDomTreeGenerator.cs
- TemplatePropertyEntry.cs
- DataGridViewSelectedRowCollection.cs
- MembershipPasswordException.cs
- DbModificationClause.cs
- VisualStyleInformation.cs
- SelectionProviderWrapper.cs
- DoubleKeyFrameCollection.cs
- CapabilitiesRule.cs
- RequestContext.cs
- XmlName.cs
- InvalidEnumArgumentException.cs
- SchemaAttDef.cs
- DesignerView.xaml.cs
- Random.cs
- StateMachineWorkflowInstance.cs
- SplitContainer.cs
- Bits.cs
- ExpressionBuilder.cs
- CustomValidator.cs
- ObjectMaterializedEventArgs.cs
- ProjectionCamera.cs
- DllNotFoundException.cs
- OpCellTreeNode.cs
- SerializationSectionGroup.cs
- NavigationPropertySingletonExpression.cs
- URLString.cs
- BuildResultCache.cs
- Repeater.cs
- QilScopedVisitor.cs
- Signature.cs