Arrange the lesson’s hybrid message-protection steps in the correct order.

### Why this is right The sender first creates encrypted message data and a protected copy of the key needed to read it. The recipient must receive both before recovering the session key and decrypting the message. ### The concept Hybrid encryption separates bulk-data encryption from key protection. A symmetric session key encrypts the message efficiently. The recipient’s public key encrypts that session key, so only the corresponding private key can recover it. The sender transmits the encrypted message with the encrypted key attached. After the recipient recovers the session key, that key decrypts the message. ### The order 1. **Encrypt the message using a symmetric session key.** The message must be encrypted with the key that will later decrypt it. 2. **Encrypt the session key using the recipient’s public key.** This protects the key needed to read the message. 3. **Attach the encrypted session key to the encrypted message and send them.** The recipient needs both protected items. 4. **The recipient uses the private key to recover the session key and decrypts the message.** Decryption follows successful recovery of the session key. ### Terms - **Hybrid encryption**: A combination of symmetric and public-key cryptography. - **Session key**: A temporary key used for a single communications session. - **Public key**: The shareable key used here to protect the session key. - **Private key**: The secret counterpart used to recover the session key. ### Remember The recipient cannot decrypt the message until the recipient has recovered its session key.