[Flags]
private enum CryptProtectFlags {
// for remote-access situations where ui is not an option
// if UI was specified on protect or unprotect operation, the call
// will fail and GetLastError() will indicate ERROR_PASSWORD_RESTRICTION
CRYPTPROTECT_UI_FORBIDDEN = 0x1,
// per machine protected data -- any user on machine where CryptProtectData
// took place may CryptUnprotectData
CRYPTPROTECT_LOCAL_MACHINE = 0x4,
// force credential synchronize during CryptProtectData()
// Synchronize is only operation that occurs during this operation
CRYPTPROTECT_CRED_SYNC = 0x8,
// Generate an Audit on protect and unprotect operations
CRYPTPROTECT_AUDIT = 0x10,
// Protect data with a non-recoverable key
CRYPTPROTECT_NO_RECOVERY = 0x20,
// Verify the protection of a protected blob
CRYPTPROTECT_VERIFY_PROTECTION = 0x40
}
VB Definition:
<Flags()> Enum CryptProtectFlags
' for remote-access situations where ui is not an option
' if UI was specified on protect or unprotect operation, the call
' will fail and GetLastError() will indicate ERROR_PASSWORD_RESTRICTION
CRYPTPROTECT_UI_FORBIDDEN = &H1
' per machine protected data -- any user on machine where CryptProtectData
' took place may CryptUnprotectData
CRYPTPROTECT_LOCAL_MACHINE = &H4
' force credential synchronize during CryptProtectData()
' Synchronize is only operation that occurs during this operation
CRYPTPROTECT_CRED_SYNC = &H8
' Generate an Audit on protect and unprotect operations
CRYPTPROTECT_AUDIT = &H10
' Protect data with a non-recoverable key
CRYPTPROTECT_NO_RECOVERY = &H20
' Verify the protection of a protected blob
CRYPTPROTECT_VERIFY_PROTECTION = &H40
End Enum
User-Defined Types:
None.
Notes:
None.
Tips & Tricks:
Please add some!
The CryptProtectData function performs encryption on the data in a DATA_BLOB structure. Typically, only a user with the same logon credential as the encrypter can decrypt the data. In addition, the encryption and decryption usually must be done on the same computer.
16/03/2007 13:39:46 - -204.16.176.130
The CryptUnprotectData function decrypts and does an integrity check of the data in a DATA_BLOB structure. Usually, only a user with the same logon credentials as the encrypter can decrypt the data. In addition, the encryption and decryption must be done on the same computer.