CyberGlossary

Cryptography

Public-Key Cryptography

Also known as: Asymmetric cryptography, PKC

Definition

A branch of cryptography that uses paired public and private keys to enable encryption, key exchange, digital signatures, and authentication without a pre-shared secret.

Public-key cryptography, introduced by Diffie and Hellman in 1976, replaces a single shared secret with two mathematically linked keys: a public key that can be distributed openly and a private key that must remain confidential. The underlying security relies on problems believed to be computationally hard, such as integer factorization (RSA), the discrete logarithm in finite fields (DH, DSA) or on elliptic curves (ECDH, ECDSA), and lattice problems (Kyber, Dilithium). It provides three core capabilities: confidentiality through public-key encryption, authenticated key agreement, and digital signatures for integrity and non-repudiation. Because pure public-key operations are slow, they are typically combined with symmetric primitives in hybrid protocols like TLS, SSH, and S/MIME.

Examples

  • X.509 certificates carry a public key and are signed by a Certificate Authority.
  • SSH uses public-key cryptography for passwordless server authentication.

Related terms