What must stay in working memory
- The certificate binds an identity to a public key; it does not encrypt the entire application stream.
- Handshake authentication and key establishment occur before protected application data is accepted.
- Fresh session keys confine routine bulk encryption; ephemeral key agreement can preserve old sessions if a long-term authentication key is compromised later.
Concrete examples
- A browser validates the server identity, derives traffic secrets from the handshake, then exchanges symmetrically protected HTTP records.
- Envelope encryption similarly protects bulk data with a data key and protects only that small key with another mechanism.
Decision rules you’ll retrieve
Order and justify a hybrid TLS session
Authenticate the peer and handshake while establishing fresh shared secrets, derive traffic keys, and only then exchange application records under symmetric authenticated encryption.
Retrieval cue: Explain why TLS uses multiple cryptographic primitives and order authentication, key establishment, key derivation, and protected application traffic.