DriversRecommendedOutdated drivers can make a good PC feel brokenScan driver issues before chasing fixes manually.Scan NowOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PC×
Skip to content
World desk2 min

What Is Public-Key Cryptography? Definition and Uses

Public-key cryptography uses a shareable public key and a protected private key for functions such as encryption, digital signatures, and key agreement.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Public-key cryptography, also called asymmetric cryptography, uses a mathematically related pair of keys: a public key that can be shared and a private key that must be protected. Depending on the algorithm, the pair can support encryption, digital signatures, or key agreement—but not every public-key algorithm does all three.

How a public-key pair works

The two keys have different roles. Someone may share a public key openly, while keeping the corresponding private key secret. NIST’s glossary definition of public-key cryptography describes the approach as using separate keys for operations such as encryption and decryption or signing and verification. The exact operations depend on the cryptographic scheme.

As an Amazon Associate I earn from qualifying purchases.

In practice, public-key methods can help people communicate securely without first sharing a secret key. They are also used in digital signatures and in protocols that establish shared secret material. These are related applications of asymmetric cryptography, not interchangeable names for the same operation.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What public-key cryptography is used for

Encryption and decryption

For a confidentiality use, a sender can encrypt data or a key for a recipient using the recipient’s public key; the corresponding private key is used to decrypt it. This is a useful basic model, but actual algorithms and protocols have specific constraints. A public key should not be assumed to encrypt every kind of message directly.

Digital signatures

A signer uses a private key to create a digital signature, and others can use the matching public key to verify it. A valid signature can provide evidence of authenticity and help detect changes to signed data. It does not make the message secret: anyone who can read the message may still be able to do so. NIST explains these protections in its SP 800-63-4 digital identity guidance.

Key agreement

In key agreement, parties use public-key techniques to establish shared secret material. That shared material can then be used in secure communications. Unlike the simplified encryption example, key agreement is not simply one person encrypting a message for another.

Public-key encryption, signatures, and key agreement compared

Use Primary purpose Typical key roles
Encryption and decryption Confidentiality The recipient’s public key is used to encrypt data or a key; the matching private key is used to decrypt.
Digital signature Authenticity and integrity The signer’s private key creates the signature; the matching public key verifies it.
Key agreement Establishing shared secret material Parties use public-key techniques to compute or establish shared material.

These roles are described in NIST’s public-key glossary entry. The table shows common patterns, not a guarantee that any one algorithm supports every use.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Does a public key prove who owns it?

No. A public key by itself does not establish the identity of the person or service that controls the matching private key. When identity matters, a public-key certificate can bind an identifier to a subscriber’s public key. Public-key infrastructure (PKI) refers to the policies, processes, and systems used to administer certificates and key pairs. A verifier must also rely on an appropriate trust process for that binding; simply finding or receiving a public key is not proof of its owner.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.