Arrange the sender’s steps for protecting a message and its symmetric key using the lesson’s hybrid workflow.

### Why this is right The sender needs a symmetric key before encrypting the message. The message and its key are then protected separately, and both encrypted items are sent so the recipient can recover the key and read the message. ### The concept The symmetric session key handles the message efficiently. The recipient’s public key protects the session key so that the corresponding private key can recover it. Sending the encrypted message without the encrypted key would leave the recipient without the key needed to decrypt it. ### The order 1. **Create or select a symmetric session key.** The sender needs this key before using symmetric encryption. 2. **Encrypt the message with the symmetric session key.** This protects the message content. 3. **Encrypt the session key with the recipient’s public key.** This protects the key from unauthorized recovery. 4. **Send the encrypted message with the encrypted session key attached.** The recipient needs both protected items to complete decryption. ### Terms - **Session key**: A temporary symmetric key used for a communications session. - **Public key**: The recipient’s shareable key used here to protect the session key. - **Hybrid encryption**: A combination of symmetric and public-key cryptography. ### Remember Protect the message with the session key and protect the session key with the recipient’s public key.