Question

I just wanted to make sure I am on the right track

1. Sender generates private key, encrypts message
2. Sender requests receivers public key
3. “Secret” is then encrypted with this public key
4. Data sent to receiver for decryption

I assume logically speaking the “Secret” can only be encrypted with the receivers public key, although is the encrypted secret attached to the encrypted file / document?

Answer 1

p1. Sender generates session symmetric key.

p3. session key is encrypted using this public key.

Yes, the encrypted secret is attached to the encrypted file. There’s no risk in this as this is a session (one-time) key.