Code:
/ Net / Net / 3.5.50727.3053 / DEVDIV / depot / DevDiv / releases / whidbey / netfxsp / ndp / fx / src / xsp / System / Web / Security / CookieProtection.cs / 1 / CookieProtection.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. //------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007.
Link Menu
This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- QilIterator.cs
- OleDbParameterCollection.cs
- OperationInfo.cs
- ViewgenContext.cs
- LogLogRecord.cs
- SerializationSectionGroup.cs
- HttpCacheParams.cs
- CheckableControlBaseAdapter.cs
- DBCSCodePageEncoding.cs
- InternalsVisibleToAttribute.cs
- SoundPlayerAction.cs
- TreeIterators.cs
- ApplicationProxyInternal.cs
- FilteredAttributeCollection.cs
- StringCollectionMarkupSerializer.cs
- SingleBodyParameterMessageFormatter.cs
- ImageMapEventArgs.cs
- IdentifierCreationService.cs
- AnnotationAdorner.cs
- RoleGroupCollection.cs
- UIElement3D.cs
- ControlAdapter.cs
- NamespaceList.cs
- WebServiceMethodData.cs
- Transform3DGroup.cs
- TextWriterTraceListener.cs
- Lasso.cs
- StrongNameUtility.cs
- URL.cs
- UnicodeEncoding.cs
- shaperfactory.cs
- _NestedSingleAsyncResult.cs
- ObjectReaderCompiler.cs
- EnumerableValidator.cs
- NonBatchDirectoryCompiler.cs
- HtmlInputButton.cs
- WindowsComboBox.cs
- CharConverter.cs
- EventSinkHelperWriter.cs
- ResourceSet.cs
- versioninfo.cs
- ClientRuntimeConfig.cs
- OutOfMemoryException.cs
- UpdateTranslator.cs
- HtmlWindowCollection.cs
- ParsedAttributeCollection.cs
- CodeAttachEventStatement.cs
- printdlgexmarshaler.cs
- XslException.cs
- RoutedCommand.cs
- CompositeControl.cs
- RayHitTestParameters.cs
- PixelFormats.cs
- ConfigsHelper.cs
- CounterSampleCalculator.cs
- TemplateControlCodeDomTreeGenerator.cs
- KeySplineConverter.cs
- IdentityReference.cs
- AnnotationResourceCollection.cs
- XmlDesignerDataSourceView.cs
- EntityContainer.cs
- SingleBodyParameterMessageFormatter.cs
- ServiceOperation.cs
- SecUtil.cs
- ParseNumbers.cs
- Timeline.cs
- ResourceKey.cs
- ConfigViewGenerator.cs
- UpdateTranslator.cs
- UpdateRecord.cs
- BuildResult.cs
- WebEvents.cs
- XmlComplianceUtil.cs
- GlobalAllocSafeHandle.cs
- SoapHeaderAttribute.cs
- InputGestureCollection.cs
- ComponentResourceKeyConverter.cs
- ColumnMapTranslator.cs
- DefaultValueTypeConverter.cs
- CallbackHandler.cs
- ScrollChrome.cs
- PropertyTab.cs
- HttpServerVarsCollection.cs
- SecurityTokenTypes.cs
- AffineTransform3D.cs
- FormViewModeEventArgs.cs
- DiscardableAttribute.cs
- IntegrationExceptionEventArgs.cs
- PointCollection.cs
- versioninfo.cs
- DESCryptoServiceProvider.cs
- PropertyPath.cs
- BackgroundWorker.cs
- BlobPersonalizationState.cs
- SessionPageStateSection.cs
- WebPartHelpVerb.cs
- ParseHttpDate.cs
- FieldBuilder.cs
- ControlBuilder.cs
- SQLUtility.cs