Data Protection API: Difference between revisions

Revision as of 16:47, 19 September 2022

Revision as of 16:49, 19 September 2022

Line 13:

==Use of DPAPI by Microsoft software==

While not universally implemented in all Microsoft products, the use of DPAPI by Microsoft products has increased with each successive version of Windows. However, many applications from Microsoft and third-party developers still prefer to use their own protection approach or have only recently switched to use DPAPI. For example, [[Internet Explorer]] versions 4.0-60–6.0, [[Outlook Express]] and [[MSN Explorer]] used the older Protected Storage (PStore) API to store saved credentials such as passwords etc. [[Internet Explorer &nbsp;7]] now protects stored user credentials using DPAPI.<ref>{{cite web | url=http://www.symantec.com/connect/articles/password-management-concerns-ie-and-firefox-part-one | title=Password Management Concerns with IE and Firefox, part one | author=Mikhael Felker | date=December 8, 2006 | access-date=2010-03-28 | publisher=[[SecurityFocus.com]], [[Symantec.com]]}}</ref>

* Picture password, PIN and fingerprint in [[Windows 8]]

* [[Encrypting File System]] in Windows 2000 and later

* SQL Server [[Transparent Data Encryption]] (TDE) Service Master Key encryption<ref>{{cite web|url=https://msdn.microsoft.com/en-us/library/ms189586(v=sql.110).aspx|title=Encryption Hierarchy|website=Msdn.microsoft.com|access-date=14 October 2017}}</ref>

* [[Internet Explorer 7]], both in the standalone version available for [[Windows &nbsp;XP]] and in the integrated versions available in [[Windows Vista]] and [[Windows Server 2008]]

* [[Microsoft Edge]]

* [[Windows Mail]] and [[Windows Live Mail]]

Line 25:

* Windows [[Rights Management Services]] client v1.1 and later

* [[Windows 2000]] and later for [[Extensible Authentication Protocol#EAP-TLS|EAP/TLS]] ([[VPN]] authentication) and 802.1x ([[WiFi]] authentication)

* Windows XP and later for Storedstored Useruser Namesnames and Passwordspasswords<ref>{{cite web|url=https://technet.microsoft.com/en-us/library/bb457059.aspx|title=What's New in Security for Windows XP Professional and Windows XP Home Edition|website=Technet.microsoft.com|access-date=14 October 2017}}</ref> (aka Credential Manager)

* [[.NET Framework 2.0]] and later for System.Security.Cryptography.ProtectedData<ref>{{cite web|url=http://msdn2.microsoft.com/en-us/library/system.security.cryptography.protecteddata.aspx|title=ProtectedData Class (System.Security.Cryptography)|website=Msdn2.microsoft.com|access-date=14 October 2017}}</ref>

* Microsoft.Owin (Katana) authentication by default when self -hosting (including cookie authentication and [[OAuth]] tokens)<ref>{{cite web|title=CookieAuthenticationOptions.TicketDataFormat Property (Microsoft.Owin.Security.Cookies)|url=http://msdn.microsoft.com/en-us/library/microsoft.owin.security.cookies.cookieauthenticationoptions.ticketdataformat(v=vs.113).aspx|access-date=2015-01-15}}</ref><ref>{{cite web|title=OAuthAuthorizationServerOptions.AccessTokenFormat Property (Microsoft.Owin.Security.OAuth)|url=http://msdn.microsoft.com/en-us/library/microsoft.owin.security.oauth.oauthauthorizationserveroptions.accesstokenformat(v=vs.113).aspx|access-date=2018-11-26}}</ref>

==References==