Hybrid encryption
Hybrid encryption combines asymmetric cryptography or key exchange for protecting a symmetric key with symmetric authenticated encryption for protecting data.
Real-World Cryptography
Hybrid encryption is an encryption technique that combines asymmetric encryption or key exchange with symmetric authenticated encryption to protect messages of arbitrary practical size.
- How it is used
- Deploys public-key encryption or key exchange to deliver symmetric protection for messages too large for direct asymmetric encryption.
- How deep it goes
- Explains construction and decryption steps, then descends into ECIES with ECDH, ephemeral keys, and authenticated encryption.
- Examples
- Uses RSA-based key protection, ECIES with ECDH, AES-GCM, message-flow figures, and a Java Google Tink listing.
- What you can do after
- Apply it via ECIES or a documented interoperable implementation to encrypt larger messages with authenticated symmetric protection.
Read how Real-World Cryptography explains hybrid encryption →
Software Security for Developers
Hybrid encryption is a scheme that uses public-key cryptography to protect a symmetric encryption key and symmetric cryptography to protect the data.
- How it is used
- Uses AES for efficient content encryption and RSA for securely transporting the AES key.
- How deep it goes
- Explains the sender and recipient steps, algorithm choices, key wrapping, and recommended RSA padding and key sizes.
- Examples
- Uses AES-GCM with a 256-bit key, RSA-OAEP, an AES CEK, and encrypted content-plus-key transmission.
- What you can do after
- Apply hybrid encryption by generating an AES CEK, encrypting content, wrapping the CEK with RSA-OAEP, and reversing those steps.
Read how Software Security for Developers explains hybrid encryption →
Related concepts
- AESused by · The Advanced Encryption Standard (AES) is a symmetric block cipher that encrypts and decrypts data in 128-bit blocks using 128-, 192-, or 256-bit keys.
- RSAused by · RSA is a public-key cryptosystem based on the computational difficulty of factoring large composite integers and supporting encryption and digital signatures.
- TLSused by · Transport Layer Security (TLS) is a cryptographic protocol that protects network communications through confidentiality, integrity, and authentication of communicating endpoints.
- PGPused by · PGP is a cryptographic standard for protecting messages and files with public-key encryption, digital signatures, and key management.
- public key cryptographyuses · Public-key cryptography is asymmetric cryptography that uses mathematically related public and private keys for encryption, decryption, signing, and verification.
- authenticated encryption with associated datauses · Authenticated encryption with associated data is a cryptographic construction that encrypts plaintext while authenticating the ciphertext and optional unencrypted associated data.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.