All Questions

Filter by
Sorted by
Tagged with
3 votes
2 answers
1k views

Why does my DPAPI data start with the same bits?

I am using the DPAPI C# ProtectedData class to encrypt some information stored in the database. I am using it both with and without the optionalEntropy. Encrypting the same data multiple times, the ...
0 votes
1 answer
122 views

Is DPAPI usable when only being able to read the file directory?

DPAPI: Windows Data Protection API Say I would be able to read a Windows system file system, including all files. Say there would be a DPAPI encrypted value somewhere in this system that I want to ...
1 vote
1 answer
1k views

Is DPAPI still valid option to protect eg. encryption key?

I have an Java client program for Windows having a properties file that I need to be able to encrypt (protect it if a malicious user accesses the server and properties file) but the client program of ...
4 votes
1 answer
2k views

BitLocker with Windows DPAPI Encryption Key Management

Disclaimer: I realize that I posted this question on ServerFault, but I have not received any response there. I am hoping that this forum might be a more appropriate place to post this for a response....
1 vote
0 answers
121 views

Which Windows 10 login protects secure data?

Windows can protect sensitive data using CryptProtectData, which according to the Windows docs, encrypts data for a given program using the user's login password. But Windows 10 has several forms of ...
0 votes
1 answer
351 views

DPAPI Decryption

An application I am looking to use is using DPAPI to encrypt a Client Secret as part of a OAuth2 Authentication flow. A domain service account will be used for encryption with the password stored in ...
7 votes
2 answers
1k views

Is there any reason to use AesManaged over DPAPI in this scenario?

I have a situation where my web application is going to be deployed on multiple web servers, and I'll be wanting to store some securely encrypted data on the DB servers (each web server has a DB ...
0 votes
1 answer
414 views

Encrypting data in a load-balanced application - am I doing this right?

A web application I'm developing needs to store some sensitive data in a database. I need to be able to retrieve and use this data later on so hashing isn't enough. The web application might, at some ...