Followup: Cryptographic key management

So after some wrangling with my webhost, playing with key containers, and chatting with an MS sort over on forums.asp.net, I've come to the conclusion that machine-level key stores are the proper way to store crypto keys on the server -- never use plaintext files, as I'd originally been considering.

The ASPNET and/or Network Service context should have access to store and retrieve keys from the machine-level store. You can insert them programmatically, or most host support staffers should be able to import them as well.

RSA Cryptography Demo

RSA Cryptography Demo

I've written a simple demo application in .NET 2.0/3.0/3.5 (C#) showing how to generate and manage keys and encrypt/decrypt data using the RSA asymmetric algorithm.