Obtain the plain text session key using CryptoAPI

Raphael Amorim

22 Sep 2022MIT

161.5K

1.6K

Generally it's very important to obtain the value of session keys. However, the Microsoft Cryptographic Providers (Base and Enhanced) do not support this feature. CryptExportKey() and CryptImportKey() require a valid key handle to encrypt and decrypt the session key, respectively.

This is an old version of the currently published article.

Only logged in members can view this content

Please go to the Cryptography Table of Contents to view the list of available articles in this section.