All Questions
Tagged with windows-dpapi encryption
8
questions
3
votes
2
answers
1k
views
Why does my DPAPI data start with the same bits?
I am using the DPAPI C# ProtectedData class to encrypt some information stored in the database. I am using it both with and without the optionalEntropy. Encrypting the same data multiple times, the ...
0
votes
1
answer
122
views
Is DPAPI usable when only being able to read the file directory?
DPAPI: Windows Data Protection API
Say I would be able to read a Windows system file system, including all files.
Say there would be a DPAPI encrypted value somewhere in this system that I want to ...
1
vote
1
answer
1k
views
Is DPAPI still valid option to protect eg. encryption key?
I have an Java client program for Windows having a properties file that I need to be able to encrypt (protect it if a malicious user accesses the server and properties file) but the client program of ...
4
votes
1
answer
2k
views
BitLocker with Windows DPAPI Encryption Key Management
Disclaimer: I realize that I posted this question on ServerFault, but I have not received any response there. I am hoping that this forum might be a more appropriate place to post this for a response....
1
vote
0
answers
121
views
Which Windows 10 login protects secure data?
Windows can protect sensitive data using CryptProtectData, which according to the Windows docs, encrypts data for a given program using the user's login password.
But Windows 10 has several forms of ...
0
votes
1
answer
351
views
DPAPI Decryption
An application I am looking to use is using DPAPI to encrypt a Client Secret as part of a OAuth2 Authentication flow. A domain service account will be used for encryption with the password stored in ...
7
votes
2
answers
1k
views
Is there any reason to use AesManaged over DPAPI in this scenario?
I have a situation where my web application is going to be deployed on multiple web servers, and I'll be wanting to store some securely encrypted data on the DB servers (each web server has a DB ...
0
votes
1
answer
414
views
Encrypting data in a load-balanced application - am I doing this right?
A web application I'm developing needs to store some sensitive data in a database. I need to be able to retrieve and use this data later on so hashing isn't enough.
The web application might, at some ...