Windows Data Protection API
Windows Data Protection API (DPAPI) appeared with the release of Windows 2000. It was obvious at the time that developers and users needed the ability to protect their data through the use of encryption. The DPAPI interface is extremely simple, and provides two functions for users: protect data and unprotect data.
Because of the way key-based encryption works, there needs to be some way to protect one user's data from another user. Because DPAPI is part of the operating system, and it requires a password in order to perform data protection operations, it only makes sense that it would use your Windows credential information.
This brings up another problem. There are cases where many different people use the same account ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access