Crate dpapi_core 

Pure-Rust, byte-oriented DPAPI library.

dpapi-core parses the Windows DPAPI_BLOB wire format, decrypts a blob given its master key, and unwraps Chrome/Edge v10/v20 AES-256-GCM cookie values. Every entry point takes &[u8] and performs no I/O, so the same code serves both live-memory (LSASS) and on-disk artifacts (Chrome Login Data / Local State, Credential Manager, Vault, Wi-Fi keys).

The blob format and the decrypt-given-key crypto are identical on disk and in memory; only the source of the master key differs by medium (LSASS cache vs. master-key files + password derivation), which lives in callers.

All cryptography uses audited RustCrypto crates — no hand-rolled primitives.

Re-exports

pub use blob::parse_dpapi_blob;

pub use blob::DpapiBlob;

pub use chrome::decrypt_v10_cookie;

pub use chrome::detect_chrome_cookie_encoding;

pub use chrome::ChromeCookieEncoding;

pub use decrypt::decrypt_aes256_cbc;

pub use decrypt::decrypt_dpapi_blob;

pub use decrypt::verify_hmac_sha1;

pub use error::DpapiError;

Modules

blob

chrome

decrypt

error

Error type shared across the DPAPI blob parser, decryptor, and Chrome cookie unwrapper.