Sounds like your doing simple string concatenation to form your SQL query
which is a bad idea.

You should use SQLParameters in your SQL query and set the respective values
of SQL Parameter objects.

However, the createDecryptor method returns an object so not entirely sure
what your referring to. If you are referring to the key or IV, then this
could potentially contain the ASCII code for an apostraphe but its just a
series of bytes.

--
- Paul Glavich
Microsoft MVP - ASP.NET


"WaterBug" <WaterBug@discussions.microsoft.com> wrote in message
news:CC7BEEA0-4DD8-4A61-A8C0-7176F7DD646A@microsoft.com...
> I am using SymmetricAlgorithm to encrypt and decrypt passwords. I want to
> know if the resulting output from createDecryptor can potentially contain
a
> single quote. Ultimately, I need to know whether to handle that possible
> single quote in my code when using a SQL query and wrapping single quotes
> around the value. Thanks...k