title: ASP.net Encrypt Files After Upload / Decrypt To User
body: <p>I am doing some research and development into a possible project that my potential client is discussing with me.</p>
  
  <p>I am looking at creating an asp.net 4.5 web application that will be accessed over the web and hold some pretty sensitive information. The information is going to be uploaded via the webApp and the files stored on the server for viewing / retrieval later. I want to ensure the information is securely uploaded and stored. in order to do this I will propose a EV SSL certificate is used across the application at all times and some sort of encryption applied to the files (jpeg,pdf,txt) to ensure that if someone gained access to the application at server level the files are not directly viewable without the application too, this is where I am looking for suggestions or improvements.</p>
  
  <p>My research has guided me to AES encryption on the files, again is this going to be sufficient to protect the files ? Should encryption be applied at OS level (win2008) ? Should I store the files in the database ?</p>
  
  <p>The files must be readable back to the user on the webApp and viewable in the browser.</p>
  
  <p>Should any further information be needed, please ask!</p>