3 ms·

Windows doesn't have a system level key store. Instead the Windows API's have a symmetric encryption API (DPAPI) that allows developers to supply plain text, a

Windows doesn't have a system level key store. Instead the Windows API's have a symmetric encryption API (DPAPI) that allows developers to supply plain text, and receive cipher text. It would then be up to developers to persist the cipher text. DPAPI master key is protected by the OS, behind User Credentials.

blibble 5y ago
isn't it per user though, instead of per developer (like apple)? a dodgy pypi package that can call CryptUnprotectData too
- balls187 5y ago
  Per login credential, yes.
  - blibble 5y ago
    so that's essentially useless against this sort of attack?