is the statment legal?

[Caronte]

That´s why I wouldn´t recommend to use the data inside an string that way.

Yes, avi, the second method (with the corrections suggested) is much better.

[rfmobile]

Hi avi;

If you already have STL string available then just create a second string - or vector as Paul suggests. Let STL take core of deleting the string for you instead of calling new[]/delete[].

Wondering: how does CryptEncrypt know the length of the string?

-rick