Just a thought... Can you pass the values to Flash/Flex "encrypted". Then write a web service for the Flash/Flex to pass those values to that returns them "decrypted".
If you are using ColdFusion, I'd go with a Flash remoting connection to the CFC since this passes data as binary. Not quite encrypted. But not likely to be deciphered easily.
