Skip to content

Latest commit

 

History

History
33 lines (20 loc) · 892 Bytes

protected-data-format.md

File metadata and controls

33 lines (20 loc) · 892 Bytes
description ms.assetid title ms.topic ms.date
Protected data is stored as an ASN.1 encoded BLOB.
8E287A1F-4EDF-4068-85F7-59A1D73F7BCD
Protected Data Format
article
05/31/2018

Protected Data Format

Protected data is stored as an ASN.1 encoded BLOB. The data is formatted as CMS (certificate message syntax) enveloped content. The digital envelope contains encrypted content, recipient information that contains an encrypted content encryption key (CEK), and a header that contains information about the content, including the unencrypted protection descriptor rule string. This is shown by the following diagram.

protected enveloped data

Related topics

CNG DPAPI

Protection Descriptors

Protection Providers