SecurityInnovation/TMContentReview — Issue #45: Create and Store a Symmetric Encryption Key
Author: SergeTruth
Created: 2011-11-07 22:19:37+00:00
State: open

The "s" in parenthesis needs to be removed.

// The IV need not be protected, as an intermediary who intercepts an encrypted
// communication(s) still needs the secret key to decrypt the message.

// Store the AES symmetric (shared secret) key to a byte array
// encrypt[ed] and stored in the registry by using the DPAPI ProtectedData class.

We're using the CurrentUser scope instead of the MachineKey scope so that other(,)
// users or applications which may become compromised cannot access this key in the