ROBOT.LK

According to MSDN link, your method is called "Initializes a new instance of the RSACryptoServiceProvider class using the default key". So it sound like the default keys are used. I don' think the keys are also included in the message. I think those must be separately given to its readers. This RSA guid would help you to understand some parts.

Thats great... thank you for your time with this Saman

Thats made things a bit clearer now. Although I did notice at the top of the article that the RSACSP is unusable on a shared hosting environment, which is something I was considering for this asp.net payment system that have to build.

I think it might be better if I start to look into SSL instead....

Thanks again for your help!

Trebor.