package crypto

import "errors"

// ErrDPAPIUnsupported is returned by Unprotect on non-Windows platforms,
// where DPAPI does not exist. Callers migrating WinAuth XML that used
// DPAPI encryption must run the migration on Windows.
var ErrDPAPIUnsupported = errors.New("crypto: DPAPI is only available on Windows")

// DPAPIScope picks which key the OS uses to derive the decryption key.
type DPAPIScope int

const (
	// DPAPIScopeCurrentUser uses the per-user master key. The XML must be
	// decrypted on the same Windows user account that encrypted it.
	DPAPIScopeCurrentUser DPAPIScope = iota
	// DPAPIScopeLocalMachine uses the per-machine master key. Any user
	// on the same machine can decrypt the payload.
	DPAPIScopeLocalMachine
)