Re:DPAPI security flaw in Windows 10
by icebraining on Tuesday June 18, 2019 @03:04AM
(#20210347)
> OK, that is incorrect. DPAPI is supposed to protect from this by deriving encryption key from your password.
That's the point: DPAPI is (deliberately) bypassed by TBAL, by storing the necessary info from the user's password to decrypt the DPAPI key after reboot.
That's the point: DPAPI is (deliberately) bypassed by TBAL, by storing the necessary info from the user's password to decrypt the DPAPI key after reboot.