# What is the difference between symmetric and asymmetric encryption?

Symmetric encryption uses one shared key to lock and unlock; asymmetric, or public-key, encryption uses a pair: a public key anyone may know and a private key only its owner holds. Symmetric algorithms such as AES are fast and encrypt almost all real data. Their weak point is sharing the key safely. Public-key methods such as RSA, elliptic-curve Diffie-Hellman and their post-quantum successors solve that: two parties who have never met can agree on a fresh symmetric key over an open network, and a private key can sign data so that anyone with the public key can check it. Real protocols combine both. A TLS connection uses public-key cryptography in the handshake to agree a key and prove the server's identity, then switches to AES or ChaCha20 for the data. That split also explains the quantum story: Shor's algorithm threatens the public-key part, while symmetric encryption with 256-bit keys stays strong.

FAQ: [Encryption and encrypted traffic](https://netsenx.com/en/faq/encryption) · https://netsenx.com/en/faq/what-is-the-difference-between-symmetric-and-asymmetric-encryption

## Read next

- https://netsenx.com/en/encrypted-traffic-analysis
- https://netsenx.com/en/what-is-ndr

## Related questions

- [How long should an encryption key be?](https://netsenx.com/en/faq/how-long-should-an-encryption-key-be)
- [What is a hash function?](https://netsenx.com/en/faq/what-is-a-hash-function)
- [Is hashing the same as encryption for passwords?](https://netsenx.com/en/faq/is-hashing-the-same-as-encryption-for-passwords)
- [What is a digital signature?](https://netsenx.com/en/faq/what-is-a-digital-signature)
- [What is a TLS certificate?](https://netsenx.com/en/faq/what-is-a-tls-certificate)