Skip to main content

decrypt_vpol_keys

dpapi_core::vault

Function decrypt_vpol_keys 

Source 
pub fn decrypt_vpol_keys(
    vpol_blob: &[u8],
    master_key: &[u8],
) -> Result<VaultVpolKeys, DpapiError>
Expand description

Decrypt the VPOL policy blob with the master key → the two AES keys.

vpol_blob is the inner DPAPI blob (post parse_vpol_file). A wrong/absent master key fails the blob’s Sign-HMAC and returns a DpapiError — it never returns guessed keys.