Function hash_alg 

pub fn hash_alg(alg_id_hash: u32) -> HashAlg

Resolve a DPAPI algId (the hash algorithm) to its properties.

Delegates the algId → params knowledge to forensicnomicon::dpapi::hash_alg_info — recognising CALG_SHA1 (0x8004 → SHA1), CALG_HMAC (0x8009 → SHA512 module, 64-byte derive block) and CALG_SHA_512 (0x800e → SHA512, 128-byte derive block). Any other value falls back to SHA1, matching the historical default.