You can verify this with a simple program, stated below that shows that CryptoStream.Close() is explicitly not required. The expected result should be 104 since 13 bytes should be allocated. We get 104 with a call to Close() or without calling Close(). 1: using System; 2: using System.IO; ...