RSA Encryption via C# privatekey xml access

Question

I used this article RSA Encryption in C# and it's perfectly working fine ... But I think there is a security problem . if we want to use this method,we must put xml files in web root directory and anyone can access these keys... how can we prevent this problem ?

Answer 1

The emphasis of the article is about how to use asymmetric encryption (RSA) and an example in C#. Key management is, really, another (big) topic.

On windows, there are key containers where you can save private keys and then set user permissions on who can read/write/modify the key.

You can then administer the import and export of the keys in order to move them between machines.

As you point out, key management is vital to design a secure system. There are many solutions that vary in complexity and cost.