2.2.17 EFS_DECRYPTION_STATUS_INFO

  • Article

The EFS_DECRYPTION_STATUS_INFO type is used to represent the predicted outcome if an attempt were made to read the plaintext of an encrypted object.

 typedef struct {
   DWORD dwDecryptionError;
   DWORD dwHashOffset;
   DWORD cbHash;
 } EFS_DECRYPTION_STATUS_INFO;

dwDecryptionError: The error code returned if decryption were attempted. If the operation were to succeed, this value MUST be zero. Otherwise it MUST be set to a nonzero value.

dwHashOffset: The offset of the appended certificate hash in bytes from the start of this structure.

cbHash: The length in bytes of the appended certificate hash.

If dwDecryptionError is nonzero, the preceding fields are followed by the hash of a certificate whose corresponding private key is required for the decryption to succeed.