Question about crypto and soap calls

[Greg Merideth]

I've got a project where I need a client application to perform a
"challenge/response" from the client to the server via webmethods to
authenticate and pass data so that the session cannot be replayed if
someone captures the data stream.

I've played around with RijndaelManaged in the past but I dont see how
to split they keys between the client and the server. I dont see how a
RijndaelManaged process can split the key[] and iv[] in such a way that
I can recombine the data at the server's end so I assume I need a
public/private key for this to work?

So I send out the public key with the client so the data gets encoded
with the public key and the server decrypts with the private key and
gets the data back (aka using gpg or pgp)?

 

[William Stacey [MVP]]

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnwse/html/wssecdrill.asp