Code:
/ FXUpdate3074 / FXUpdate3074 / 1.1 / DEVDIV / depot / DevDiv / releases / whidbey / QFE / ndp / fx / src / xsp / System / Web / Security / CookieProtection.cs / 1 / CookieProtection.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. // Copyright (c) Microsoft Corporation. All rights reserved. //------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. // Copyright (c) Microsoft Corporation. All rights reserved.
Link Menu
This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- HashHelper.cs
- PinnedBufferMemoryStream.cs
- FormatterServices.cs
- ColorContextHelper.cs
- ViewRendering.cs
- ParseNumbers.cs
- PageVisual.cs
- MailMessageEventArgs.cs
- ListSortDescription.cs
- RuntimeHandles.cs
- UserUseLicenseDictionaryLoader.cs
- SiteMapProvider.cs
- SecuritySessionSecurityTokenProvider.cs
- MatchAttribute.cs
- SchemaElement.cs
- LinqDataSourceSelectEventArgs.cs
- TraceRecords.cs
- BuiltInExpr.cs
- StrongNamePublicKeyBlob.cs
- SplayTreeNode.cs
- ResourcePermissionBaseEntry.cs
- Window.cs
- PropertyGridDesigner.cs
- BufferedWebEventProvider.cs
- EventItfInfo.cs
- RepeaterItem.cs
- AutoResetEvent.cs
- ConfigurationLocationCollection.cs
- BaseDataList.cs
- Native.cs
- Trace.cs
- OdbcDataReader.cs
- DataGridViewHitTestInfo.cs
- ScrollBarRenderer.cs
- EntityTransaction.cs
- MessageFormatterConverter.cs
- PropertyInfo.cs
- WebPartCancelEventArgs.cs
- ParameterBuilder.cs
- AuthStoreRoleProvider.cs
- SoapAttributes.cs
- ActivityBindForm.Designer.cs
- PeerNode.cs
- ConfigurationManager.cs
- Pair.cs
- AttachedPropertyBrowsableForChildrenAttribute.cs
- BuildProviderInstallComponent.cs
- EntityWrapper.cs
- PathSegmentCollection.cs
- EllipticalNodeOperations.cs
- Util.cs
- XmlDocumentType.cs
- XmlJsonReader.cs
- DataServiceQuery.cs
- Rules.cs
- ConfigXmlAttribute.cs
- HtmlButton.cs
- ConfigXmlReader.cs
- AccessibleObject.cs
- AnnotationService.cs
- QueryContinueDragEvent.cs
- ConfigurationSectionHelper.cs
- JavaScriptObjectDeserializer.cs
- TreeSet.cs
- PreservationFileWriter.cs
- TableLayoutPanel.cs
- OleAutBinder.cs
- TextDecorationCollection.cs
- ReceiveSecurityHeaderEntry.cs
- ObjectDisposedException.cs
- BitmapInitialize.cs
- PageResolution.cs
- Metadata.cs
- WindowsStatusBar.cs
- CodeVariableReferenceExpression.cs
- KoreanLunisolarCalendar.cs
- SingleAnimationBase.cs
- Int16Storage.cs
- RuleInfoComparer.cs
- PkcsUtils.cs
- Table.cs
- RadioButtonFlatAdapter.cs
- DesignerCommandSet.cs
- StylusTip.cs
- RuleAttributes.cs
- AggregateNode.cs
- Parsers.cs
- prefixendpointaddressmessagefiltertable.cs
- GenerateHelper.cs
- TableLayout.cs
- AttachedAnnotationChangedEventArgs.cs
- DetailsViewDeleteEventArgs.cs
- TransactionFlowAttribute.cs
- NetCodeGroup.cs
- ActivityMarkupSerializer.cs
- XmlILStorageConverter.cs
- SafeNativeMethods.cs
- TagPrefixAttribute.cs
- Boolean.cs
- AsymmetricKeyExchangeDeformatter.cs