dpapi

This is a commandline tool to pass tokens to CryptProtectData() with the CRYPTPROTECT_LOCAL_MACHINE flag set.

There are other commandline tools to do this, like dpapibridge, but they're C#, so require .NET.

I needed a native version, couldn't find one, so wrote a quick one.

$ ./dpapi.exe --help
dpapi.exe [OPTIONS...] STRING

Use DPAPI to protect STRING using CryptProtectData. The
data encrypted is associated with the local machine.

   --help      : print this message
   --encrypt   : encrypt the specified string
   --decrypt   : decrypt the specified string
   --version   : print version and exit

no string provided to encrypt/decrypt