As far as I can tell, Microsoft says I am doing it right:

http://msdn.microsoft.com/en-us/library/system.security.cryp...