Updated samples and project template custom stores to use ICryptoKeyStore for RPs.

4 files changed, 176 insertions, 173 deletions

diff --git a/samples/OpenIdRelyingPartyWebForms/Code/CustomStore.cs b/samples/OpenIdRelyingPartyWebForms/Code/CustomStore.cs
index 325a5d0..d113c8b 100644
--- a/samples/OpenIdRelyingPartyWebForms/Code/CustomStore.cs
+++ b/samples/OpenIdRelyingPartyWebForms/Code/CustomStore.cs
@@ -1,8 +1,11 @@
 namespace OpenIdRelyingPartyWebForms.Code {
 	using System;
+	using System.Collections.Generic;
 	using System.Data;
 	using System.Globalization;
 	using System.Security.Cryptography;
+	using DotNetOpenAuth;
+	using DotNetOpenAuth.Configuration;
 	using DotNetOpenAuth.OpenId;
 	using DotNetOpenAuth.OpenId.RelyingParty;
 
@@ -29,7 +32,7 @@
 		/// The context SHOULD be treated as case-sensitive.
 		/// The value will never be <c>null</c> but may be the empty string.</param>
 		/// <param name="nonce">A series of random characters.</param>
-		/// <param name="timestamp">The timestamp that together with the nonce string make it unique.
+		/// <param name="timestampUtc">The timestamp that together with the nonce string make it unique.
 		/// The timestamp may also be used by the data store to clear out old nonces.</param>
 		/// <returns>
 		/// True if the nonce+timestamp (combination) was not previously in the database.
@@ -42,7 +45,7 @@
 		/// is retrieved or set using the
 		/// <see cref="StandardExpirationBindingElement.MaximumMessageAge"/> property.
 		/// </remarks>
-		public bool StoreNonce(string context, string nonce, DateTime timestamp) {
+		public bool StoreNonce(string context, string nonce, DateTime timestampUtc) {
 			// IMPORTANT: If actually persisting to a database that can be reached from
 			// different servers/instances of this class at once, it is vitally important
 			// to protect against race condition attacks by one or more of these:
@@ -54,76 +57,73 @@
 			// at you in the result of a race condition somewhere in your web site UI code
 			// and display some message to have the user try to log in again, and possibly
 			// warn them about a replay attack.
-			timestamp = timestamp.ToLocalTime();
 			lock (this) {
-				if (dataSet.Nonce.FindByIssuedCodeContext(timestamp, nonce, context) != null) {
+				if (dataSet.Nonce.FindByIssuedUtcCodeContext(timestampUtc, nonce, context) != null) {
 					return false;
 				}
 
-				TimeSpan maxMessageAge = DotNetOpenAuth.Configuration.DotNetOpenAuthSection.Configuration.Messaging.MaximumMessageLifetime;
-				dataSet.Nonce.AddNonceRow(context, nonce, timestamp, timestamp + maxMessageAge);
+				TimeSpan maxMessageAge = DotNetOpenAuthSection.Configuration.Messaging.MaximumMessageLifetime;
+				dataSet.Nonce.AddNonceRow(context, nonce, timestampUtc, timestampUtc + maxMessageAge);
 				return true;
 			}
 		}
 
 		public void ClearExpiredNonces() {
-			this.removeExpiredRows(dataSet.Nonce, dataSet.Nonce.ExpiresColumn.ColumnName);
+			this.removeExpiredRows(dataSet.Nonce, dataSet.Nonce.ExpiresUtcColumn.ColumnName);
 		}
 
 		#endregion
 
-		#region IRelyingPartyAssociationStore Members
+		#region ICryptoKeyStore Members
 
-		public void StoreAssociation(Uri providerEndpoint, Association assoc) {
-			var assocRow = dataSet.Association.NewAssociationRow();
-			assocRow.DistinguishingFactor = providerEndpoint.AbsoluteUri;
-			assocRow.Handle = assoc.Handle;
-			assocRow.Expires = assoc.Expires.ToLocalTime();
-			assocRow.PrivateData = assoc.SerializePrivateData();
-			dataSet.Association.AddAssociationRow(assocRow);
+		public CryptoKey GetKey(string bucket, string handle) {
+			var assocRow = dataSet.CryptoKey.FindByBucketHandle(bucket, handle);
+			return new CryptoKey(assocRow.Secret, assocRow.ExpiresUtc);
 		}
 
-		public Association GetAssociation(Uri providerEndpoint, SecuritySettings securitySettings) {
-			// TODO: properly consider the securitySettings when picking an association to return.
+		public IEnumerable<KeyValuePair<string, CryptoKey>> GetKeys(string bucket) {
 			// properly escape the URL to prevent injection attacks.
-			string value = providerEndpoint.AbsoluteUri.Replace("'", "''");
+			string value = bucket.Replace("'", "''");
 			string filter = string.Format(
 				CultureInfo.InvariantCulture,
 				"{0} = '{1}'",
-				dataSet.Association.DistinguishingFactorColumn.ColumnName,
+				dataSet.CryptoKey.BucketColumn.ColumnName,
 				value);
-			string sort = dataSet.Association.ExpiresColumn.ColumnName + " DESC";
-			DataView view = new DataView(dataSet.Association, filter, sort, DataViewRowState.CurrentRows);
+			string sort = dataSet.CryptoKey.ExpiresUtcColumn.ColumnName + " DESC";
+			DataView view = new DataView(dataSet.CryptoKey, filter, sort, DataViewRowState.CurrentRows);
 			if (view.Count == 0) {
-				return null;
+				yield break;
+			}
+
+			foreach (CustomStoreDataSet.CryptoKeyRow row in view) {
+				yield return new KeyValuePair<string, CryptoKey>(row.Handle, new CryptoKey(row.Secret, row.ExpiresUtc));
 			}
-			var row = (CustomStoreDataSet.AssociationRow)view[0].Row;
-			return Association.Deserialize(row.Handle, row.Expires.ToUniversalTime(), row.PrivateData);
 		}
 
-		public Association GetAssociation(Uri providerEndpoint, string handle) {
-			var assocRow = dataSet.Association.FindByDistinguishingFactorHandle(providerEndpoint.AbsoluteUri, handle);
-			return Association.Deserialize(assocRow.Handle, assocRow.Expires, assocRow.PrivateData);
+		public void StoreKey(string bucket, string handle, CryptoKey key) {
+			var cryptoKeyRow = dataSet.CryptoKey.NewCryptoKeyRow();
+			cryptoKeyRow.Bucket = bucket;
+			cryptoKeyRow.Handle = handle;
+			cryptoKeyRow.ExpiresUtc = key.ExpiresUtc;
+			cryptoKeyRow.Secret = key.Key;
+			dataSet.CryptoKey.AddCryptoKeyRow(cryptoKeyRow);
 		}
 
-		public bool RemoveAssociation(Uri providerEndpoint, string handle) {
-			var row = dataSet.Association.FindByDistinguishingFactorHandle(providerEndpoint.AbsoluteUri, handle);
+		public void RemoveKey(string bucket, string handle) {
+			var row = dataSet.CryptoKey.FindByBucketHandle(bucket, handle);
 			if (row != null) {
-				dataSet.Association.RemoveAssociationRow(row);
-				return true;
-			} else {
-				return false;
+				dataSet.CryptoKey.RemoveCryptoKeyRow(row);
 			}
 		}
 
 		#endregion
 
-		internal void ClearExpiredAssociations() {
-			this.removeExpiredRows(dataSet.Association, dataSet.Association.ExpiresColumn.ColumnName);
+		internal void ClearExpiredSecrets() {
+			this.removeExpiredRows(dataSet.CryptoKey, dataSet.CryptoKey.ExpiresUtcColumn.ColumnName);
 		}
 
 		private void removeExpiredRows(DataTable table, string expiredColumnName) {
-			string filter = string.Format(CultureInfo.InvariantCulture, "{0} < #{1}#", expiredColumnName, DateTime.Now);
+			string filter = string.Format(CultureInfo.InvariantCulture, "{0} < #{1}#", expiredColumnName, DateTime.UtcNow);
 			DataView view = new DataView(table, filter, null, DataViewRowState.CurrentRows);
 			for (int i = view.Count - 1; i >= 0; i--) {
 				view.Delete(i);
diff --git a/samples/OpenIdRelyingPartyWebForms/Code/CustomStoreDataSet.xsd b/samples/OpenIdRelyingPartyWebForms/Code/CustomStoreDataSet.xsd
index fa161fd..f3270f6 100644
--- a/samples/OpenIdRelyingPartyWebForms/Code/CustomStoreDataSet.xsd
+++ b/samples/OpenIdRelyingPartyWebForms/Code/CustomStoreDataSet.xsd
@@ -9,39 +9,39 @@
       </DataSource>
     </xs:appinfo>
   </xs:annotation>
-  <xs:element name="CustomStoreDataSet" msdata:IsDataSet="true" msdata:UseCurrentLocale="true" msprop:Generator_UserDSName="CustomStoreDataSet" msprop:Generator_DataSetName="CustomStoreDataSet" msprop:EnableTableAdapterManager="true">
+  <xs:element name="CustomStoreDataSet" msdata:IsDataSet="true" msdata:UseCurrentLocale="true" msprop:EnableTableAdapterManager="true" msprop:Generator_DataSetName="CustomStoreDataSet" msprop:Generator_UserDSName="CustomStoreDataSet">
     <xs:complexType>
       <xs:choice minOccurs="0" maxOccurs="unbounded">
-        <xs:element name="Association" msprop:Generator_UserTableName="Association" msprop:Generator_RowDeletedName="AssociationRowDeleted" msprop:Generator_RowChangedName="AssociationRowChanged" msprop:Generator_RowClassName="AssociationRow" msprop:Generator_RowChangingName="AssociationRowChanging" msprop:Generator_RowEvArgName="AssociationRowChangeEvent" msprop:Generator_RowEvHandlerName="AssociationRowChangeEventHandler" msprop:Generator_TableClassName="AssociationDataTable" msprop:Generator_TableVarName="tableAssociation" msprop:Generator_RowDeletingName="AssociationRowDeleting" msprop:Generator_TablePropName="Association">
+        <xs:element name="CryptoKey" msprop:Generator_UserTableName="CryptoKey" msprop:Generator_RowEvArgName="CryptoKeyRowChangeEvent" msprop:Generator_TableVarName="tableCryptoKey" msprop:Generator_TablePropName="CryptoKey" msprop:Generator_RowDeletingName="CryptoKeyRowDeleting" msprop:Generator_RowChangingName="CryptoKeyRowChanging" msprop:Generator_RowDeletedName="CryptoKeyRowDeleted" msprop:Generator_TableClassName="CryptoKeyDataTable" msprop:Generator_RowChangedName="CryptoKeyRowChanged" msprop:Generator_RowEvHandlerName="CryptoKeyRowChangeEventHandler" msprop:Generator_RowClassName="CryptoKeyRow">
           <xs:complexType>
             <xs:sequence>
-              <xs:element name="DistinguishingFactor" msprop:Generator_UserColumnName="DistinguishingFactor" msprop:Generator_ColumnPropNameInRow="DistinguishingFactor" msprop:Generator_ColumnVarNameInTable="columnDistinguishingFactor" msprop:Generator_ColumnPropNameInTable="DistinguishingFactorColumn" type="xs:string" />
-              <xs:element name="Handle" msprop:Generator_UserColumnName="Handle" msprop:Generator_ColumnPropNameInRow="Handle" msprop:Generator_ColumnVarNameInTable="columnHandle" msprop:Generator_ColumnPropNameInTable="HandleColumn" type="xs:string" />
-              <xs:element name="Expires" msprop:Generator_UserColumnName="Expires" msprop:Generator_ColumnPropNameInRow="Expires" msprop:Generator_ColumnVarNameInTable="columnExpires" msprop:Generator_ColumnPropNameInTable="ExpiresColumn" type="xs:dateTime" />
-              <xs:element name="PrivateData" msprop:Generator_UserColumnName="PrivateData" msprop:Generator_ColumnPropNameInRow="PrivateData" msprop:Generator_ColumnVarNameInTable="columnPrivateData" msprop:Generator_ColumnPropNameInTable="PrivateDataColumn" type="xs:base64Binary" />
+              <xs:element name="Bucket" msprop:Generator_ColumnVarNameInTable="columnBucket" msprop:Generator_ColumnPropNameInRow="Bucket" msprop:Generator_ColumnPropNameInTable="BucketColumn" msprop:Generator_UserColumnName="Bucket" type="xs:string" />
+              <xs:element name="Handle" msprop:Generator_ColumnVarNameInTable="columnHandle" msprop:Generator_ColumnPropNameInRow="Handle" msprop:Generator_ColumnPropNameInTable="HandleColumn" msprop:Generator_UserColumnName="Handle" type="xs:string" />
+              <xs:element name="ExpiresUtc" msdata:DateTimeMode="Utc" msprop:Generator_ColumnVarNameInTable="columnExpiresUtc" msprop:Generator_ColumnPropNameInRow="ExpiresUtc" msprop:Generator_ColumnPropNameInTable="ExpiresUtcColumn" msprop:Generator_UserColumnName="ExpiresUtc" type="xs:dateTime" />
+              <xs:element name="Secret" msprop:Generator_ColumnVarNameInTable="columnSecret" msprop:Generator_ColumnPropNameInRow="Secret" msprop:Generator_ColumnPropNameInTable="SecretColumn" msprop:Generator_UserColumnName="Secret" type="xs:base64Binary" />
             </xs:sequence>
           </xs:complexType>
         </xs:element>
-        <xs:element name="Nonce" msprop:Generator_UserTableName="Nonce" msprop:Generator_RowDeletedName="NonceRowDeleted" msprop:Generator_RowChangedName="NonceRowChanged" msprop:Generator_RowClassName="NonceRow" msprop:Generator_RowChangingName="NonceRowChanging" msprop:Generator_RowEvArgName="NonceRowChangeEvent" msprop:Generator_RowEvHandlerName="NonceRowChangeEventHandler" msprop:Generator_TableClassName="NonceDataTable" msprop:Generator_TableVarName="tableNonce" msprop:Generator_RowDeletingName="NonceRowDeleting" msprop:Generator_TablePropName="Nonce">
+        <xs:element name="Nonce" msprop:Generator_UserTableName="Nonce" msprop:Generator_RowEvArgName="NonceRowChangeEvent" msprop:Generator_TableVarName="tableNonce" msprop:Generator_TablePropName="Nonce" msprop:Generator_RowDeletingName="NonceRowDeleting" msprop:Generator_RowChangingName="NonceRowChanging" msprop:Generator_RowDeletedName="NonceRowDeleted" msprop:Generator_TableClassName="NonceDataTable" msprop:Generator_RowChangedName="NonceRowChanged" msprop:Generator_RowEvHandlerName="NonceRowChangeEventHandler" msprop:Generator_RowClassName="NonceRow">
           <xs:complexType>
             <xs:sequence>
-              <xs:element name="Context" msprop:Generator_UserColumnName="Context" msprop:Generator_ColumnVarNameInTable="columnContext" msprop:Generator_ColumnPropNameInRow="Context" msprop:Generator_ColumnPropNameInTable="ContextColumn" type="xs:string" />
-              <xs:element name="Code" msprop:Generator_UserColumnName="Code" msprop:Generator_ColumnVarNameInTable="columnCode" msprop:Generator_ColumnPropNameInRow="Code" msprop:Generator_ColumnPropNameInTable="CodeColumn" type="xs:string" />
-              <xs:element name="Issued" msprop:Generator_UserColumnName="Issued" msprop:Generator_ColumnVarNameInTable="columnIssued" msprop:Generator_ColumnPropNameInRow="Issued" msprop:Generator_ColumnPropNameInTable="IssuedColumn" type="xs:dateTime" />
-              <xs:element name="Expires" msprop:Generator_UserColumnName="Expires" msprop:Generator_ColumnPropNameInRow="Expires" msprop:Generator_ColumnVarNameInTable="columnExpires" msprop:Generator_ColumnPropNameInTable="ExpiresColumn" type="xs:dateTime" />
+              <xs:element name="Context" msprop:Generator_ColumnVarNameInTable="columnContext" msprop:Generator_ColumnPropNameInRow="Context" msprop:Generator_ColumnPropNameInTable="ContextColumn" msprop:Generator_UserColumnName="Context" type="xs:string" />
+              <xs:element name="Code" msprop:Generator_ColumnVarNameInTable="columnCode" msprop:Generator_ColumnPropNameInRow="Code" msprop:Generator_ColumnPropNameInTable="CodeColumn" msprop:Generator_UserColumnName="Code" type="xs:string" />
+              <xs:element name="IssuedUtc" msdata:DateTimeMode="Utc" msprop:Generator_ColumnVarNameInTable="columnIssuedUtc" msprop:Generator_ColumnPropNameInRow="IssuedUtc" msprop:Generator_ColumnPropNameInTable="IssuedUtcColumn" msprop:Generator_UserColumnName="IssuedUtc" type="xs:dateTime" />
+              <xs:element name="ExpiresUtc" msdata:DateTimeMode="Utc" msprop:Generator_ColumnVarNameInTable="columnExpiresUtc" msprop:Generator_ColumnPropNameInRow="ExpiresUtc" msprop:Generator_ColumnPropNameInTable="ExpiresUtcColumn" msprop:Generator_UserColumnName="ExpiresUtc" type="xs:dateTime" />
             </xs:sequence>
           </xs:complexType>
         </xs:element>
       </xs:choice>
     </xs:complexType>
     <xs:unique name="PrimaryKey" msdata:PrimaryKey="true">
-      <xs:selector xpath=".//mstns:Association" />
-      <xs:field xpath="mstns:DistinguishingFactor" />
+      <xs:selector xpath=".//mstns:CryptoKey" />
+      <xs:field xpath="mstns:Bucket" />
       <xs:field xpath="mstns:Handle" />
     </xs:unique>
     <xs:unique name="Constraint1" msdata:PrimaryKey="true">
       <xs:selector xpath=".//mstns:Nonce" />
-      <xs:field xpath="mstns:Issued" />
+      <xs:field xpath="mstns:IssuedUtc" />
       <xs:field xpath="mstns:Code" />
       <xs:field xpath="mstns:Context" />
     </xs:unique>
diff --git a/samples/OpenIdRelyingPartyWebForms/Code/CustomStoreDataSet.xss b/samples/OpenIdRelyingPartyWebForms/Code/CustomStoreDataSet.xss
index ab8f226..631148e 100644
--- a/samples/OpenIdRelyingPartyWebForms/Code/CustomStoreDataSet.xss
+++ b/samples/OpenIdRelyingPartyWebForms/Code/CustomStoreDataSet.xss
@@ -4,9 +4,9 @@
      Changes to this file may cause incorrect behavior and will be lost if
      the code is regenerated.
 </autogenerated>-->
-<DiagramLayout xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ex:showrelationlabel="False" ViewPortX="0" ViewPortY="0" xmlns:ex="urn:schemas-microsoft-com:xml-msdatasource-layout-extended" xmlns="urn:schemas-microsoft-com:xml-msdatasource-layout">
+<DiagramLayout xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" ex:showrelationlabel="False" ViewPortX="-10" ViewPortY="-10" xmlns:ex="urn:schemas-microsoft-com:xml-msdatasource-layout-extended" xmlns="urn:schemas-microsoft-com:xml-msdatasource-layout">
   <Shapes>
-    <Shape ID="DesignTable:Association" ZOrder="2" X="349" Y="83" Height="105" Width="154" AdapterExpanded="true" DataTableExpanded="true" OldAdapterHeight="0" OldDataTableHeight="0" SplitterPosition="101" />
+    <Shape ID="DesignTable:CryptoKey" ZOrder="2" X="349" Y="83" Height="105" Width="154" AdapterExpanded="true" DataTableExpanded="true" OldAdapterHeight="0" OldDataTableHeight="0" SplitterPosition="101" />
     <Shape ID="DesignTable:Nonce" ZOrder="1" X="604" Y="86" Height="125" Width="150" AdapterExpanded="true" DataTableExpanded="true" OldAdapterHeight="0" OldDataTableHeight="0" SplitterPosition="121" />
   </Shapes>
   <Connectors />
diff --git a/samples/OpenIdRelyingPartyWebForms/Code/CustomStoreDataSet1.Designer.cs b/samples/OpenIdRelyingPartyWebForms/Code/CustomStoreDataSet1.Designer.cs
index 9922a4d..fa28b9c 100644
--- a/samples/OpenIdRelyingPartyWebForms/Code/CustomStoreDataSet1.Designer.cs
+++ b/samples/OpenIdRelyingPartyWebForms/Code/CustomStoreDataSet1.Designer.cs
@@ -1,7 +1,7 @@
 //------------------------------------------------------------------------------
 // <auto-generated>
 //     This code was generated by a tool.
-//     Runtime Version:4.0.30104.0
+//     Runtime Version:4.0.30319.225
 //
 //     Changes to this file may cause incorrect behavior and will be lost if
 //     the code is regenerated.
@@ -24,7 +24,7 @@ namespace OpenIdRelyingPartyWebForms.Code {
     [global::System.ComponentModel.Design.HelpKeywordAttribute("vs.data.DataSet")]
     public partial class CustomStoreDataSet : global::System.Data.DataSet {
         
-        private AssociationDataTable tableAssociation;
+        private CryptoKeyDataTable tableCryptoKey;
         
         private NonceDataTable tableNonce;
         
@@ -56,8 +56,8 @@ namespace OpenIdRelyingPartyWebForms.Code {
             if ((this.DetermineSchemaSerializationMode(info, context) == global::System.Data.SchemaSerializationMode.IncludeSchema)) {
                 global::System.Data.DataSet ds = new global::System.Data.DataSet();
                 ds.ReadXmlSchema(new global::System.Xml.XmlTextReader(new global::System.IO.StringReader(strSchema)));
-                if ((ds.Tables["Association"] != null)) {
-                    base.Tables.Add(new AssociationDataTable(ds.Tables["Association"]));
+                if ((ds.Tables["CryptoKey"] != null)) {
+                    base.Tables.Add(new CryptoKeyDataTable(ds.Tables["CryptoKey"]));
                 }
                 if ((ds.Tables["Nonce"] != null)) {
                     base.Tables.Add(new NonceDataTable(ds.Tables["Nonce"]));
@@ -84,9 +84,9 @@ namespace OpenIdRelyingPartyWebForms.Code {
         [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
         [global::System.ComponentModel.Browsable(false)]
         [global::System.ComponentModel.DesignerSerializationVisibility(global::System.ComponentModel.DesignerSerializationVisibility.Content)]
-        public AssociationDataTable Association {
+        public CryptoKeyDataTable CryptoKey {
             get {
-                return this.tableAssociation;
+                return this.tableCryptoKey;
             }
         }
         
@@ -167,8 +167,8 @@ namespace OpenIdRelyingPartyWebForms.Code {
                 this.Reset();
                 global::System.Data.DataSet ds = new global::System.Data.DataSet();
                 ds.ReadXml(reader);
-                if ((ds.Tables["Association"] != null)) {
-                    base.Tables.Add(new AssociationDataTable(ds.Tables["Association"]));
+                if ((ds.Tables["CryptoKey"] != null)) {
+                    base.Tables.Add(new CryptoKeyDataTable(ds.Tables["CryptoKey"]));
                 }
                 if ((ds.Tables["Nonce"] != null)) {
                     base.Tables.Add(new NonceDataTable(ds.Tables["Nonce"]));
@@ -206,10 +206,10 @@ namespace OpenIdRelyingPartyWebForms.Code {
         [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
         [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
         internal void InitVars(bool initTable) {
-            this.tableAssociation = ((AssociationDataTable)(base.Tables["Association"]));
+            this.tableCryptoKey = ((CryptoKeyDataTable)(base.Tables["CryptoKey"]));
             if ((initTable == true)) {
-                if ((this.tableAssociation != null)) {
-                    this.tableAssociation.InitVars();
+                if ((this.tableCryptoKey != null)) {
+                    this.tableCryptoKey.InitVars();
                 }
             }
             this.tableNonce = ((NonceDataTable)(base.Tables["Nonce"]));
@@ -228,15 +228,15 @@ namespace OpenIdRelyingPartyWebForms.Code {
             this.Namespace = "http://tempuri.org/CustomStoreDataSet.xsd";
             this.EnforceConstraints = true;
             this.SchemaSerializationMode = global::System.Data.SchemaSerializationMode.IncludeSchema;
-            this.tableAssociation = new AssociationDataTable();
-            base.Tables.Add(this.tableAssociation);
+            this.tableCryptoKey = new CryptoKeyDataTable();
+            base.Tables.Add(this.tableCryptoKey);
             this.tableNonce = new NonceDataTable();
             base.Tables.Add(this.tableNonce);
         }
         
         [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
         [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-        private bool ShouldSerializeAssociation() {
+        private bool ShouldSerializeCryptoKey() {
             return false;
         }
         
@@ -302,7 +302,7 @@ namespace OpenIdRelyingPartyWebForms.Code {
         }
         
         [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-        public delegate void AssociationRowChangeEventHandler(object sender, AssociationRowChangeEvent e);
+        public delegate void CryptoKeyRowChangeEventHandler(object sender, CryptoKeyRowChangeEvent e);
         
         [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
         public delegate void NonceRowChangeEventHandler(object sender, NonceRowChangeEvent e);
@@ -312,20 +312,20 @@ namespace OpenIdRelyingPartyWebForms.Code {
         ///</summary>
         [global::System.Serializable()]
         [global::System.Xml.Serialization.XmlSchemaProviderAttribute("GetTypedTableSchema")]
-        public partial class AssociationDataTable : global::System.Data.TypedTableBase<AssociationRow> {
+        public partial class CryptoKeyDataTable : global::System.Data.TypedTableBase<CryptoKeyRow> {
             
-            private global::System.Data.DataColumn columnDistinguishingFactor;
+            private global::System.Data.DataColumn columnBucket;
             
             private global::System.Data.DataColumn columnHandle;
             
-            private global::System.Data.DataColumn columnExpires;
+            private global::System.Data.DataColumn columnExpiresUtc;
             
-            private global::System.Data.DataColumn columnPrivateData;
+            private global::System.Data.DataColumn columnSecret;
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            public AssociationDataTable() {
-                this.TableName = "Association";
+            public CryptoKeyDataTable() {
+                this.TableName = "CryptoKey";
                 this.BeginInit();
                 this.InitClass();
                 this.EndInit();
@@ -333,7 +333,7 @@ namespace OpenIdRelyingPartyWebForms.Code {
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            internal AssociationDataTable(global::System.Data.DataTable table) {
+            internal CryptoKeyDataTable(global::System.Data.DataTable table) {
                 this.TableName = table.TableName;
                 if ((table.CaseSensitive != table.DataSet.CaseSensitive)) {
                     this.CaseSensitive = table.CaseSensitive;
@@ -350,16 +350,16 @@ namespace OpenIdRelyingPartyWebForms.Code {
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            protected AssociationDataTable(global::System.Runtime.Serialization.SerializationInfo info, global::System.Runtime.Serialization.StreamingContext context) : 
+            protected CryptoKeyDataTable(global::System.Runtime.Serialization.SerializationInfo info, global::System.Runtime.Serialization.StreamingContext context) : 
                     base(info, context) {
                 this.InitVars();
             }
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            public global::System.Data.DataColumn DistinguishingFactorColumn {
+            public global::System.Data.DataColumn BucketColumn {
                 get {
-                    return this.columnDistinguishingFactor;
+                    return this.columnBucket;
                 }
             }
             
@@ -373,17 +373,17 @@ namespace OpenIdRelyingPartyWebForms.Code {
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            public global::System.Data.DataColumn ExpiresColumn {
+            public global::System.Data.DataColumn ExpiresUtcColumn {
                 get {
-                    return this.columnExpires;
+                    return this.columnExpiresUtc;
                 }
             }
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            public global::System.Data.DataColumn PrivateDataColumn {
+            public global::System.Data.DataColumn SecretColumn {
                 get {
-                    return this.columnPrivateData;
+                    return this.columnSecret;
                 }
             }
             
@@ -398,56 +398,56 @@ namespace OpenIdRelyingPartyWebForms.Code {
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            public AssociationRow this[int index] {
+            public CryptoKeyRow this[int index] {
                 get {
-                    return ((AssociationRow)(this.Rows[index]));
+                    return ((CryptoKeyRow)(this.Rows[index]));
                 }
             }
             
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            public event AssociationRowChangeEventHandler AssociationRowChanging;
+            public event CryptoKeyRowChangeEventHandler CryptoKeyRowChanging;
             
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            public event AssociationRowChangeEventHandler AssociationRowChanged;
+            public event CryptoKeyRowChangeEventHandler CryptoKeyRowChanged;
             
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            public event AssociationRowChangeEventHandler AssociationRowDeleting;
+            public event CryptoKeyRowChangeEventHandler CryptoKeyRowDeleting;
             
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            public event AssociationRowChangeEventHandler AssociationRowDeleted;
+            public event CryptoKeyRowChangeEventHandler CryptoKeyRowDeleted;
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            public void AddAssociationRow(AssociationRow row) {
+            public void AddCryptoKeyRow(CryptoKeyRow row) {
                 this.Rows.Add(row);
             }
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            public AssociationRow AddAssociationRow(string DistinguishingFactor, string Handle, System.DateTime Expires, byte[] PrivateData) {
-                AssociationRow rowAssociationRow = ((AssociationRow)(this.NewRow()));
+            public CryptoKeyRow AddCryptoKeyRow(string Bucket, string Handle, System.DateTime ExpiresUtc, byte[] Secret) {
+                CryptoKeyRow rowCryptoKeyRow = ((CryptoKeyRow)(this.NewRow()));
                 object[] columnValuesArray = new object[] {
-                        DistinguishingFactor,
+                        Bucket,
                         Handle,
-                        Expires,
-                        PrivateData};
-                rowAssociationRow.ItemArray = columnValuesArray;
-                this.Rows.Add(rowAssociationRow);
-                return rowAssociationRow;
+                        ExpiresUtc,
+                        Secret};
+                rowCryptoKeyRow.ItemArray = columnValuesArray;
+                this.Rows.Add(rowCryptoKeyRow);
+                return rowCryptoKeyRow;
             }
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            public AssociationRow FindByDistinguishingFactorHandle(string DistinguishingFactor, string Handle) {
-                return ((AssociationRow)(this.Rows.Find(new object[] {
-                            DistinguishingFactor,
+            public CryptoKeyRow FindByBucketHandle(string Bucket, string Handle) {
+                return ((CryptoKeyRow)(this.Rows.Find(new object[] {
+                            Bucket,
                             Handle})));
             }
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
             public override global::System.Data.DataTable Clone() {
-                AssociationDataTable cln = ((AssociationDataTable)(base.Clone()));
+                CryptoKeyDataTable cln = ((CryptoKeyDataTable)(base.Clone()));
                 cln.InitVars();
                 return cln;
             }
@@ -455,62 +455,63 @@ namespace OpenIdRelyingPartyWebForms.Code {
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
             protected override global::System.Data.DataTable CreateInstance() {
-                return new AssociationDataTable();
+                return new CryptoKeyDataTable();
             }
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
             internal void InitVars() {
-                this.columnDistinguishingFactor = base.Columns["DistinguishingFactor"];
+                this.columnBucket = base.Columns["Bucket"];
                 this.columnHandle = base.Columns["Handle"];
-                this.columnExpires = base.Columns["Expires"];
-                this.columnPrivateData = base.Columns["PrivateData"];
+                this.columnExpiresUtc = base.Columns["ExpiresUtc"];
+                this.columnSecret = base.Columns["Secret"];
             }
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
             private void InitClass() {
-                this.columnDistinguishingFactor = new global::System.Data.DataColumn("DistinguishingFactor", typeof(string), null, global::System.Data.MappingType.Element);
-                base.Columns.Add(this.columnDistinguishingFactor);
+                this.columnBucket = new global::System.Data.DataColumn("Bucket", typeof(string), null, global::System.Data.MappingType.Element);
+                base.Columns.Add(this.columnBucket);
                 this.columnHandle = new global::System.Data.DataColumn("Handle", typeof(string), null, global::System.Data.MappingType.Element);
                 base.Columns.Add(this.columnHandle);
-                this.columnExpires = new global::System.Data.DataColumn("Expires", typeof(global::System.DateTime), null, global::System.Data.MappingType.Element);
-                base.Columns.Add(this.columnExpires);
-                this.columnPrivateData = new global::System.Data.DataColumn("PrivateData", typeof(byte[]), null, global::System.Data.MappingType.Element);
-                base.Columns.Add(this.columnPrivateData);
+                this.columnExpiresUtc = new global::System.Data.DataColumn("ExpiresUtc", typeof(global::System.DateTime), null, global::System.Data.MappingType.Element);
+                base.Columns.Add(this.columnExpiresUtc);
+                this.columnSecret = new global::System.Data.DataColumn("Secret", typeof(byte[]), null, global::System.Data.MappingType.Element);
+                base.Columns.Add(this.columnSecret);
                 this.Constraints.Add(new global::System.Data.UniqueConstraint("PrimaryKey", new global::System.Data.DataColumn[] {
-                                this.columnDistinguishingFactor,
+                                this.columnBucket,
                                 this.columnHandle}, true));
-                this.columnDistinguishingFactor.AllowDBNull = false;
+                this.columnBucket.AllowDBNull = false;
                 this.columnHandle.AllowDBNull = false;
-                this.columnExpires.AllowDBNull = false;
-                this.columnPrivateData.AllowDBNull = false;
+                this.columnExpiresUtc.AllowDBNull = false;
+                this.columnExpiresUtc.DateTimeMode = global::System.Data.DataSetDateTime.Utc;
+                this.columnSecret.AllowDBNull = false;
             }
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            public AssociationRow NewAssociationRow() {
-                return ((AssociationRow)(this.NewRow()));
+            public CryptoKeyRow NewCryptoKeyRow() {
+                return ((CryptoKeyRow)(this.NewRow()));
             }
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
             protected override global::System.Data.DataRow NewRowFromBuilder(global::System.Data.DataRowBuilder builder) {
-                return new AssociationRow(builder);
+                return new CryptoKeyRow(builder);
             }
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
             protected override global::System.Type GetRowType() {
-                return typeof(AssociationRow);
+                return typeof(CryptoKeyRow);
             }
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
             protected override void OnRowChanged(global::System.Data.DataRowChangeEventArgs e) {
                 base.OnRowChanged(e);
-                if ((this.AssociationRowChanged != null)) {
-                    this.AssociationRowChanged(this, new AssociationRowChangeEvent(((AssociationRow)(e.Row)), e.Action));
+                if ((this.CryptoKeyRowChanged != null)) {
+                    this.CryptoKeyRowChanged(this, new CryptoKeyRowChangeEvent(((CryptoKeyRow)(e.Row)), e.Action));
                 }
             }
             
@@ -518,8 +519,8 @@ namespace OpenIdRelyingPartyWebForms.Code {
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
             protected override void OnRowChanging(global::System.Data.DataRowChangeEventArgs e) {
                 base.OnRowChanging(e);
-                if ((this.AssociationRowChanging != null)) {
-                    this.AssociationRowChanging(this, new AssociationRowChangeEvent(((AssociationRow)(e.Row)), e.Action));
+                if ((this.CryptoKeyRowChanging != null)) {
+                    this.CryptoKeyRowChanging(this, new CryptoKeyRowChangeEvent(((CryptoKeyRow)(e.Row)), e.Action));
                 }
             }
             
@@ -527,8 +528,8 @@ namespace OpenIdRelyingPartyWebForms.Code {
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
             protected override void OnRowDeleted(global::System.Data.DataRowChangeEventArgs e) {
                 base.OnRowDeleted(e);
-                if ((this.AssociationRowDeleted != null)) {
-                    this.AssociationRowDeleted(this, new AssociationRowChangeEvent(((AssociationRow)(e.Row)), e.Action));
+                if ((this.CryptoKeyRowDeleted != null)) {
+                    this.CryptoKeyRowDeleted(this, new CryptoKeyRowChangeEvent(((CryptoKeyRow)(e.Row)), e.Action));
                 }
             }
             
@@ -536,14 +537,14 @@ namespace OpenIdRelyingPartyWebForms.Code {
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
             protected override void OnRowDeleting(global::System.Data.DataRowChangeEventArgs e) {
                 base.OnRowDeleting(e);
-                if ((this.AssociationRowDeleting != null)) {
-                    this.AssociationRowDeleting(this, new AssociationRowChangeEvent(((AssociationRow)(e.Row)), e.Action));
+                if ((this.CryptoKeyRowDeleting != null)) {
+                    this.CryptoKeyRowDeleting(this, new CryptoKeyRowChangeEvent(((CryptoKeyRow)(e.Row)), e.Action));
                 }
             }
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            public void RemoveAssociationRow(AssociationRow row) {
+            public void RemoveCryptoKeyRow(CryptoKeyRow row) {
                 this.Rows.Remove(row);
             }
             
@@ -570,7 +571,7 @@ namespace OpenIdRelyingPartyWebForms.Code {
                 type.Attributes.Add(attribute1);
                 global::System.Xml.Schema.XmlSchemaAttribute attribute2 = new global::System.Xml.Schema.XmlSchemaAttribute();
                 attribute2.Name = "tableTypeName";
-                attribute2.FixedValue = "AssociationDataTable";
+                attribute2.FixedValue = "CryptoKeyDataTable";
                 type.Attributes.Add(attribute2);
                 type.Particle = sequence;
                 global::System.Xml.Schema.XmlSchema dsSchema = ds.GetSchemaSerializable();
@@ -622,9 +623,9 @@ namespace OpenIdRelyingPartyWebForms.Code {
             
             private global::System.Data.DataColumn columnCode;
             
-            private global::System.Data.DataColumn columnIssued;
+            private global::System.Data.DataColumn columnIssuedUtc;
             
-            private global::System.Data.DataColumn columnExpires;
+            private global::System.Data.DataColumn columnExpiresUtc;
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
@@ -677,17 +678,17 @@ namespace OpenIdRelyingPartyWebForms.Code {
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            public global::System.Data.DataColumn IssuedColumn {
+            public global::System.Data.DataColumn IssuedUtcColumn {
                 get {
-                    return this.columnIssued;
+                    return this.columnIssuedUtc;
                 }
             }
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            public global::System.Data.DataColumn ExpiresColumn {
+            public global::System.Data.DataColumn ExpiresUtcColumn {
                 get {
-                    return this.columnExpires;
+                    return this.columnExpiresUtc;
                 }
             }
             
@@ -728,13 +729,13 @@ namespace OpenIdRelyingPartyWebForms.Code {
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            public NonceRow AddNonceRow(string Context, string Code, System.DateTime Issued, System.DateTime Expires) {
+            public NonceRow AddNonceRow(string Context, string Code, System.DateTime IssuedUtc, System.DateTime ExpiresUtc) {
                 NonceRow rowNonceRow = ((NonceRow)(this.NewRow()));
                 object[] columnValuesArray = new object[] {
                         Context,
                         Code,
-                        Issued,
-                        Expires};
+                        IssuedUtc,
+                        ExpiresUtc};
                 rowNonceRow.ItemArray = columnValuesArray;
                 this.Rows.Add(rowNonceRow);
                 return rowNonceRow;
@@ -742,9 +743,9 @@ namespace OpenIdRelyingPartyWebForms.Code {
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            public NonceRow FindByIssuedCodeContext(System.DateTime Issued, string Code, string Context) {
+            public NonceRow FindByIssuedUtcCodeContext(System.DateTime IssuedUtc, string Code, string Context) {
                 return ((NonceRow)(this.Rows.Find(new object[] {
-                            Issued,
+                            IssuedUtc,
                             Code,
                             Context})));
             }
@@ -768,8 +769,8 @@ namespace OpenIdRelyingPartyWebForms.Code {
             internal void InitVars() {
                 this.columnContext = base.Columns["Context"];
                 this.columnCode = base.Columns["Code"];
-                this.columnIssued = base.Columns["Issued"];
-                this.columnExpires = base.Columns["Expires"];
+                this.columnIssuedUtc = base.Columns["IssuedUtc"];
+                this.columnExpiresUtc = base.Columns["ExpiresUtc"];
             }
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
@@ -779,18 +780,20 @@ namespace OpenIdRelyingPartyWebForms.Code {
                 base.Columns.Add(this.columnContext);
                 this.columnCode = new global::System.Data.DataColumn("Code", typeof(string), null, global::System.Data.MappingType.Element);
                 base.Columns.Add(this.columnCode);
-                this.columnIssued = new global::System.Data.DataColumn("Issued", typeof(global::System.DateTime), null, global::System.Data.MappingType.Element);
-                base.Columns.Add(this.columnIssued);
-                this.columnExpires = new global::System.Data.DataColumn("Expires", typeof(global::System.DateTime), null, global::System.Data.MappingType.Element);
-                base.Columns.Add(this.columnExpires);
+                this.columnIssuedUtc = new global::System.Data.DataColumn("IssuedUtc", typeof(global::System.DateTime), null, global::System.Data.MappingType.Element);
+                base.Columns.Add(this.columnIssuedUtc);
+                this.columnExpiresUtc = new global::System.Data.DataColumn("ExpiresUtc", typeof(global::System.DateTime), null, global::System.Data.MappingType.Element);
+                base.Columns.Add(this.columnExpiresUtc);
                 this.Constraints.Add(new global::System.Data.UniqueConstraint("Constraint1", new global::System.Data.DataColumn[] {
-                                this.columnIssued,
+                                this.columnIssuedUtc,
                                 this.columnCode,
                                 this.columnContext}, true));
                 this.columnContext.AllowDBNull = false;
                 this.columnCode.AllowDBNull = false;
-                this.columnIssued.AllowDBNull = false;
-                this.columnExpires.AllowDBNull = false;
+                this.columnIssuedUtc.AllowDBNull = false;
+                this.columnIssuedUtc.DateTimeMode = global::System.Data.DataSetDateTime.Utc;
+                this.columnExpiresUtc.AllowDBNull = false;
+                this.columnExpiresUtc.DateTimeMode = global::System.Data.DataSetDateTime.Utc;
             }
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
@@ -920,25 +923,25 @@ namespace OpenIdRelyingPartyWebForms.Code {
         /// <summary>
         ///Represents strongly named DataRow class.
         ///</summary>
-        public partial class AssociationRow : global::System.Data.DataRow {
+        public partial class CryptoKeyRow : global::System.Data.DataRow {
             
-            private AssociationDataTable tableAssociation;
+            private CryptoKeyDataTable tableCryptoKey;
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            internal AssociationRow(global::System.Data.DataRowBuilder rb) : 
+            internal CryptoKeyRow(global::System.Data.DataRowBuilder rb) : 
                     base(rb) {
-                this.tableAssociation = ((AssociationDataTable)(this.Table));
+                this.tableCryptoKey = ((CryptoKeyDataTable)(this.Table));
             }
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            public string DistinguishingFactor {
+            public string Bucket {
                 get {
-                    return ((string)(this[this.tableAssociation.DistinguishingFactorColumn]));
+                    return ((string)(this[this.tableCryptoKey.BucketColumn]));
                 }
                 set {
-                    this[this.tableAssociation.DistinguishingFactorColumn] = value;
+                    this[this.tableCryptoKey.BucketColumn] = value;
                 }
             }
             
@@ -946,32 +949,32 @@ namespace OpenIdRelyingPartyWebForms.Code {
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
             public string Handle {
                 get {
-                    return ((string)(this[this.tableAssociation.HandleColumn]));
+                    return ((string)(this[this.tableCryptoKey.HandleColumn]));
                 }
                 set {
-                    this[this.tableAssociation.HandleColumn] = value;
+                    this[this.tableCryptoKey.HandleColumn] = value;
                 }
             }
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            public System.DateTime Expires {
+            public System.DateTime ExpiresUtc {
                 get {
-                    return ((global::System.DateTime)(this[this.tableAssociation.ExpiresColumn]));
+                    return ((global::System.DateTime)(this[this.tableCryptoKey.ExpiresUtcColumn]));
                 }
                 set {
-                    this[this.tableAssociation.ExpiresColumn] = value;
+                    this[this.tableCryptoKey.ExpiresUtcColumn] = value;
                 }
             }
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            public byte[] PrivateData {
+            public byte[] Secret {
                 get {
-                    return ((byte[])(this[this.tableAssociation.PrivateDataColumn]));
+                    return ((byte[])(this[this.tableCryptoKey.SecretColumn]));
                 }
                 set {
-                    this[this.tableAssociation.PrivateDataColumn] = value;
+                    this[this.tableCryptoKey.SecretColumn] = value;
                 }
             }
         }
@@ -1014,23 +1017,23 @@ namespace OpenIdRelyingPartyWebForms.Code {
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            public System.DateTime Issued {
+            public System.DateTime IssuedUtc {
                 get {
-                    return ((global::System.DateTime)(this[this.tableNonce.IssuedColumn]));
+                    return ((global::System.DateTime)(this[this.tableNonce.IssuedUtcColumn]));
                 }
                 set {
-                    this[this.tableNonce.IssuedColumn] = value;
+                    this[this.tableNonce.IssuedUtcColumn] = value;
                 }
             }
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            public System.DateTime Expires {
+            public System.DateTime ExpiresUtc {
                 get {
-                    return ((global::System.DateTime)(this[this.tableNonce.ExpiresColumn]));
+                    return ((global::System.DateTime)(this[this.tableNonce.ExpiresUtcColumn]));
                 }
                 set {
-                    this[this.tableNonce.ExpiresColumn] = value;
+                    this[this.tableNonce.ExpiresUtcColumn] = value;
                 }
             }
         }
@@ -1039,22 +1042,22 @@ namespace OpenIdRelyingPartyWebForms.Code {
         ///Row event argument class
         ///</summary>
         [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-        public class AssociationRowChangeEvent : global::System.EventArgs {
+        public class CryptoKeyRowChangeEvent : global::System.EventArgs {
             
-            private AssociationRow eventRow;
+            private CryptoKeyRow eventRow;
             
             private global::System.Data.DataRowAction eventAction;
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            public AssociationRowChangeEvent(AssociationRow row, global::System.Data.DataRowAction action) {
+            public CryptoKeyRowChangeEvent(CryptoKeyRow row, global::System.Data.DataRowAction action) {
                 this.eventRow = row;
                 this.eventAction = action;
             }
             
             [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
             [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Data.Design.TypedDataSetGenerator", "4.0.0.0")]
-            public AssociationRow Row {
+            public CryptoKeyRow Row {
                 get {
                     return this.eventRow;
                 }