digplanet beta 1: Athena
Share digplanet:


Applied sciences






















In cryptography, public-key cryptosystems are convenient in that they do not require the sender and receiver to share a common secret in order to communicate securely (among other useful properties). However, they often rely on complicated mathematical computations and are thus generally much more inefficient than comparable symmetric-key cryptosystems. In many applications, the high cost of encrypting long messages in a public-key cryptosystem can be prohibitive. A hybrid cryptosystem is one which combines the convenience of a public-key cryptosystem with the efficiency of a symmetric-key cryptosystem.

A hybrid cryptosystem can be constructed using any two separate cryptosystems:

  • a key encapsulation scheme, which is a public-key cryptosystem, and
  • a data encapsulation scheme, which is a symmetric-key cryptosystem.

The hybrid cryptosystem is itself a public-key system, whose public and private keys are the same as in the key encapsulation scheme.

Note that for very long messages the bulk of the work in encryption/decryption is done by the more efficient symmetric-key scheme, while the inefficient public-key scheme is used only to encrypt/decrypt a short key value.

Perhaps the most commonly used hybrid cryptosystems are the OpenPGP (RFC 4880) file format and the PKCS #7 (RFC 2315) file format, both used by many different systems.


To encrypt a message addressed to Alice in a hybrid cryptosystem, Bob does the following:

  1. Obtains Alice's public key.
  2. Generates a fresh symmetric key for the data encapsulation scheme.
  3. Encrypts the message under the data encapsulation scheme, using the symmetric key just generated.
  4. Encrypt the symmetric key under the key encapsulation scheme, using Alice's public key.
  5. Send both of these encryptions to Alice.

To decrypt this hybrid ciphertext, Alice does the following:

  1. uses her private key to decrypt the symmetric key contained in the key encapsulation segment.
  2. uses this symmetric key to decrypt the message contained in the data encapsulation segment.


If both the key encapsulation and data encapsulation schemes are secure against adaptive chosen ciphertext attacks, then the hybrid scheme inherits that property as well.[1] However, it is possible to construct a hybrid scheme secure against adaptive chosen ciphertext attack even if the key encapsulation has a slightly weakened security definition (though the security of the data encapsulation must be slightly stronger).[2]


  1. ^ Cramer, Ronald; Shoup, Victor (2004). "Design and Analysis of Practical Public-Key Encryption Schemes Secure against Adaptive Chosen Ciphertext Attack". SIAM Journal on Computing 33 (1): 167–226. doi:10.1137/S0097539702403773. 
  2. ^ Dennis, Hofheinz; Kiltz, Eike (2007). "Advances in Cryptology -- CRYPTO 2007". Springer. pp. 553–571.  |chapter= ignored (help)

Original courtesy of Wikipedia: http://en.wikipedia.org/wiki/Hybrid_cryptosystem — Please support Wikipedia.
This page uses Creative Commons Licensed content from Wikipedia. A portion of the proceeds from advertising on Digplanet goes to supporting Wikipedia.
149 videos foundNext > 

Chapter 4, part 11, Information Security: Principles and Practice

Information Security: Principles and Practice, 2nd edition, by Mark Stamp Chapter 4: Public Key Crypto Section 4.8, PKI trust models, hybrid cryptosystem.

Analisis Hybrid Crypto System pada HTTPS

Key Aggregate Cryptosystem for Scalable Data Sharing in Cloud Storage

2014 IEEE Transaction on Cloud Computing For More Details :: Contact::K.Manjunath 09535866270 http://www.tmksinfotech.com and http://www.bemtechprojects.com ...

Key-Aggregate Cryptosystem for Scalable Data Sharing in Cloud Storage in java

To get this project in ONLINE or through TRAINING Sessions, Contact:JP INFOTECH, Old No.31, New No.86, 1st Floor, 1st Avenue, Ashok Pillar, Chennai -83. Land...

Key-Aggregate Cryptosystem for Scalable Data Sharing in Cloud Storage

Data Alcott Systems (0) 9600095046 ieeedata@gmail.com.

RSA (cryptosystem)

RSA is one of the first practicable public-key cryptosystems and is widely used for secure data transmission. In such a cryptosystem, the encryption key is p...

Final Year Projects | Key-Aggregate Cryptosystem for Scalable Data Sharing in Cloud Storage

Final Year Projects | Key-Aggregate Cryptosystem for Scalable Data Sharing in Cloud Storage Including Packages ======================= * Complete Source Code...


TO GET THIS PROJECT THROUGH ONLINE OR TRAINING SESSION CONTACT: LansA Informatics Pvt Ltd No 165, 5th Street, Crosscut road, Gandhipuram, Coimbatore - 641 01...

Rabin Cryptosystem

Apresentação sobre o Criptosistema Rabin para avaliação da disciplina de Criptografia Aplicada. Tiago Arnold.

Key Aggregate Cryptosystem For Scalable Data Sharing In Cloud Storage

Contact: +91 8121953811,8522991105,04065511811 Mail: cloudtechnologiesprojects@gmail.com http://cloudstechnologies.in/

149 videos foundNext > 

1 news items

Sci-Tech Today

Sci-Tech Today
Mon, 11 Aug 2014 13:51:12 -0700

In other words, PGP is a hybrid cryptosystem. “When a user encrypts plaintext with PGP, PGP first compresses the plaintext. Data compression saves modem transmission time and disk space and, more importantly, strengthens cryptographic security,” ...

Oops, we seem to be having trouble contacting Twitter

Support Wikipedia

A portion of the proceeds from advertising on Digplanet goes to supporting Wikipedia. Please add your support for Wikipedia!

Searchlight Group

Digplanet also receives support from Searchlight Group. Visit Searchlight