dpapi-core 0.1.0

Pure-Rust, byte-oriented DPAPI library — parse DPAPI_BLOB, decrypt given a master key, and unwrap Chrome/Edge v10/v20 cookies, over any &[u8] source
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

[package]
name = "dpapi-core"
version = "0.1.0"
edition.workspace = true
rust-version.workspace = true
license.workspace = true
description = "Pure-Rust, byte-oriented DPAPI library — parse DPAPI_BLOB, decrypt given a master key, and unwrap Chrome/Edge v10/v20 cookies, over any &[u8] source"
repository.workspace = true
homepage.workspace = true
documentation = "https://docs.rs/dpapi-core"
readme.workspace = true
authors.workspace = true
keywords = ["forensics", "dpapi", "windows", "dfir", "decryption"]
categories.workspace = true

[dependencies]
thiserror = { workspace = true }
# DPAPI format KNOWLEDGE (CALG hash/cipher algIds, provider GUID, Chrome v10/v20
# prefixes, hash/cipher param descriptors). The magic numbers live in the
# zero-dep knowledge crate; parsing + crypto stay here.
forensicnomicon = { workspace = true }
# Crypto: audited RustCrypto crates only. DPAPI session-key derivation +
# AES-256-CBC / 3DES-CBC blob decryption and AES-256-GCM cookie unwrap.
aes = { workspace = true }
aes-gcm = { workspace = true }
cbc = { workspace = true }
cipher = { workspace = true }
des = { workspace = true }
hmac = { workspace = true }
sha1 = { workspace = true }
sha2 = { workspace = true }

[lints]
workspace = true