Microsoft's CryptoAPI - thoughts?