Re: [Openvpn-devel] is it possible to store saved password in tpm instead of registry ?

Hi, On 13/01/21 19:29, Илья Шипицин wrote: ср, 13 янв. 2021 г. в 22:01, Jan Just Keijser >: Hi, On 13/01/21 17:20, Илья Шипицин wrote: > Hello, > > if user save password, it might be stolen from well known location > (there are popular passw

Re: [Openvpn-devel] is it possible to store saved password in tpm instead of registry ?

Hi, The blob stored in the registry is encrypted by DPAPI and requires access to the user's session to decrypt. No matter where the blob is stored, if an attacker has access to the session, anything the GUI can read can be read by the attacker too. That said, if there is a well-defined API for pr

Re: [Openvpn-devel] is it possible to store saved password in tpm instead of registry ?

Am 13.01.2021 um 17:20 schrieb Илья Шипицин: Hello, if user save password, it might be stolen from well known location (there are popular password stealers). in theory, is it possible to keep password in tpm ? will it prevent password from being stolen ? Ilya Password storage in TPM is

Re: [Openvpn-devel] is it possible to store saved password in tpm instead of registry ?

ср, 13 янв. 2021 г. в 22:01, Jan Just Keijser : > Hi, > > On 13/01/21 17:20, Илья Шипицин wrote: > > Hello, > > > > if user save password, it might be stolen from well known location > > (there are popular password stealers). > > > > in theory, is it possible to keep password in tpm ? will it prev

Re: [Openvpn-devel] is it possible to store saved password in tpm instead of registry ?

Hi, On 13/01/21 17:20, Илья Шипицин wrote: Hello, if user save password, it might be stolen from well known location (there are popular password stealers). in theory, is it possible to keep password in tpm ? will it prevent password from being stolen ? in theory, yes, but as always, it d

[Openvpn-devel] is it possible to store saved password in tpm instead of registry ?

Hello, if user save password, it might be stolen from well known location (there are popular password stealers). in theory, is it possible to keep password in tpm ? will it prevent password from being stolen ? Ilya ___ Openvpn-devel mailing list Openvp