38 lines
1.4 KiB
C#
38 lines
1.4 KiB
C#
// Copyright (c) Microsoft Open Technologies, Inc. All rights reserved.
|
|
// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
|
|
|
|
using System;
|
|
using Microsoft.AspNet.Security.DataProtection.Managed;
|
|
using Microsoft.Framework.OptionsModel;
|
|
|
|
namespace Microsoft.AspNet.Security.DataProtection.AuthenticatedEncryption
|
|
{
|
|
public sealed class ManagedAuthenticatedEncryptorConfigurationFactory : IAuthenticatedEncryptorConfigurationFactory
|
|
{
|
|
private readonly ManagedAuthenticatedEncryptorConfigurationOptions _options;
|
|
|
|
public ManagedAuthenticatedEncryptorConfigurationFactory([NotNull] IOptionsAccessor<ManagedAuthenticatedEncryptorConfigurationOptions> optionsAccessor)
|
|
{
|
|
_options = optionsAccessor.Options.Clone();
|
|
}
|
|
|
|
public IAuthenticatedEncryptorConfiguration CreateNewConfiguration()
|
|
{
|
|
// generate a 512-bit secret randomly
|
|
const int KDK_SIZE_IN_BYTES = 512 / 8;
|
|
byte[] kdk = ManagedGenRandomImpl.Instance.GenRandom(KDK_SIZE_IN_BYTES);
|
|
ProtectedMemoryBlob secret;
|
|
try
|
|
{
|
|
secret = new ProtectedMemoryBlob(kdk);
|
|
}
|
|
finally
|
|
{
|
|
Array.Clear(kdk, 0, kdk.Length);
|
|
}
|
|
|
|
return new ManagedAuthenticatedEncryptorConfiguration(_options, secret);
|
|
}
|
|
}
|
|
}
|