relation between cryptoAPI generated machinekeystore and the key p

[shamsh]

I'm using cryptoAPIs(in VC++) to generate public/private keys (storing them
in physical drive)which can be accessed by .Net for cross language
encryption/decryption.Can anyone let me know the role of CRYPT_MACHINE_KEYSET
..
on a web environment if different users try to generate the key pairs will
it overwrite the previously generated keys or they are related to the
machinekeys?

 

[Anthony Jones]

I'm using cryptoAPIs(in VC++) to generate public/private keys (storing
them
in physical drive)which can be accessed by .Net for cross language
encryption/decryption.Can anyone let me know the role of
CRYPT_MACHINE_KEYSET
.
on a web environment if different users try to generate the key pairs will
it overwrite the previously generated keys or they are related to the
machinekeys?

The point of the machine keyset is that it belongs to the machine not to
users. They are kept in Windows folder somewhere on disk or in the
Local_Machine hive if in the registry.

In ASP.NET you only have the machine keyset available (which I guess is why
you are asking the question), in which case if you need to store private
keys on behalf of users you need manage the separation of them yourself.