Data Protection API

Data Protection Application Programming Interface (DPAPI) is a simple cryptographic application programming interface available as a built-in component in Windows 2000 and later versions of Microsoft Windows operating systems. In theory, the Data Protection API can enable symmetric encryption of any kind of data; in practice, its primary use in the Windows operating system is to perform symmetric encryption of asymmetric private keys, using a user or system secret as a significant contribution of entropy. A detailed analysis of DPAPI inner-workings was published in 2011 by Bursztein et al.

For nearly all cryptosystems, one of the most difficult challenges is "key management" – i.e. under the control of the application developer"Windows Password Recovery – DPAPI Master Key analysis". Passcape.com. Retrieved 2013-05-06.

↑ "What's New in Security for Windows XP Professional and Windows XP Home Edition". Technet.microsoft.com. 11 September 2009. Retrieved 14 October 2017.

↑ "OAuthAuthorizationServerOptions.AccessTokenFormat Property (Microsoft.Owin.Security.OAuth)". 27 October 2015. Retrieved 2018-11-26.