winapi - Do I need to store key for CryptUnprotectData and CryptProtectData? -

winapi - Do I need to store key for CryptUnprotectData and CryptProtectData? -

dpapi has 2 functions: cryptunprotectdataand cryptprotectdata. i read they encryption or decryption using session key function creates using user's logon credentials. mean not need store key anywhere , created when want encrypt or decrypt data? also found an of import point remember dpapi simply applies cryptographic protection data. not store of protected data; hence applications calling dpapi must implement own storage of protected data. key or file encrypted?

the mentioned functions utilize key specific logged in user. don't need store key. however, these functions simply info transformation , not info storage. means it's job store encrypted info chunk wherever want - cryptprotectdata won't you.

winapi encryption storage dpapi