crypt32: CryptProtectData/CryptUnprotectData

[Alexandre Julliard]

Kees Cook <kees at outflux.net> writes:

> ChangeLog:
>     Black-box implementation of CryptProtectData/CryptUnprotectData
> 
> This is a resend, since it looks like current patches are making their 
> way into CVS now.  :)  It was reviewed last week by several people, and 
> includes docs, tests, etc.

I don't understand while you come up with such an elaborate scheme of
storing things in the registry when it's clearly not the way this
thing is supposed to work. If you can't figure out what Windows does,
then just xoring the data with 0xdeadbeef or something like this would
be at least as secure as your solution, and would actually be much
closer to the proper behavior.

-- 
Alexandre Julliard
julliard at winehq.org