数据保护API范围:本地机器和当前用户

我们有一个应用程序，可以加密/解密数据作为DataProtectionScope.LocalMachine。我们现在必须将范围更改为 DataProtectionScope.CurrentUser .

当范围更改为 CurrentUser 时，在 LocalMachine 作用域下加密的现有字符串是否仍然可读，当然假设用户登录到同一台机器？

编辑：我写了一个非常快速和肮脏的测试应用程序。奇怪的是，在同一台计算机上，我可以解密在LocalMachine或CurrentUser作用域下通过LocalMachine和CurrentUser作用域加密的字符串。这听起来不像正确的行为，救命！

    private void btnUserEncrypt_Click(object sender, EventArgs e)
    {
        //encrypt data
        var data = Encoding.Unicode.GetBytes(txtUserEncrypt.Text);
        byte[] encrypted = ProtectedData.Protect(data, null, DataProtectionScope.CurrentUser);
        txtUserEncrypt.Text = Convert.ToBase64String(encrypted);
    }
    private void btnUserDecrypt_Click(object sender, EventArgs e)
    {
        byte[] data = Convert.FromBase64String(txtUserDecrypt.Text);
        //decrypt data
        byte[] decrypted = ProtectedData.Unprotect(data, null, DataProtectionScope.CurrentUser);
        txtUserDecrypt.Text = Encoding.Unicode.GetString(decrypted);
    }
    private void btnMachineEncrypt_Click(object sender, EventArgs e)
    {
        //encrypt data
        var data = Encoding.Unicode.GetBytes(txtMachineEncrypt.Text);
        byte[] encrypted = ProtectedData.Protect(data, null, DataProtectionScope.LocalMachine);
        txtMachineEncrypt.Text = Convert.ToBase64String(encrypted);
    }
    private void btnMachineDecrypt_Click(object sender, EventArgs e)
    {
        byte[] data = Convert.FromBase64String(txtMachineDecrypt.Text);
        //decrypt data
        byte[] decrypted = ProtectedData.Unprotect(data, null, DataProtectionScope.LocalMachine);
        txtMachineDecrypt.Text = Encoding.Unicode.GetString(decrypted);
    }