Try the next generation of keys.

A key encapsulation mechanism (KEM) lets two people agree a secret over an open channel. Alice publishes a public key, Bob uses it to lock up a fresh random secret, and only Alice can unlock it. The secret then keys a cipher such as AES-256-GCM.

1. 01Alice makes keysAlice

   Generate

   Alice generates a key pair and shares only the public key.

2. 02Bob encapsulatesBob

   Encapsulate

   Bob uses Alice's public key to produce a ciphertext and a 32-byte shared secret.

3. 03Alice decapsulatesAlice

   Decapsulate
   Flip one bit of the ciphertext in transit

   Alice uses her secret key to recover the same secret from Bob's ciphertext.