DPAPI and key store

16 Aug 2006 11:28 PM

Gilgamesh

I'm wroking on a C# class library which will use DPAPI (with 3DES algorithm)
to encrypt the connction string which is stored in app.config file. I was
wondering if there's a way to store the masterkey, which is used my DPAPI to
encrypt/decrypt the password, in an extrenal hardware store such as Cisco
2851 router.

Thanks,
Gilgamesh

19 Aug 2006 10:59 AM

Dominick Baier

DPAPI keys are either tied to the user or the machine. There is no (documented)
way of exporting them...

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnsecure/html/windataprotection-dpapi.asp

dominick
www.leastprivilege.com

Show quoteHide quote

> I'm wroking on a C# class library which will use DPAPI (with 3DES
> algorithm) to encrypt the connction string which is stored in
> app.config file. I was wondering if there's a way to store the
> masterkey, which is used my DPAPI to encrypt/decrypt the password, in
> an extrenal hardware store such as Cisco 2851 router.
>
> Thanks,
> Gilgamesh