pub fn decrypt_credential(
blob_bytes: &[u8],
master_key: &[u8],
) -> Result<Credential, DpapiError>Expand description
Decrypt + decode a Credential Manager entry from its DPAPI blob bytes.
blob_bytes is the inner DPAPI blob (post parse_credential_file).
master_key is the 64-byte user master key. Decrypts the blob (no entropy)
through crate::decrypt::decrypt_dpapi_blob, then parses the cleartext as a
CREDENTIAL_BLOB.
A wrong/absent master key fails the blob’s Sign-HMAC and returns a
DpapiError — it never returns a fabricated/empty credential.