Skip to main content
1 of 2

RSA or ECDHE for key establishment?

Recently, i have been looking at PKI and certificates, and TLS 1.2 as part of my study of cryptography. I have the understanding that the public key included in the certificate of a website is the key that is used to establish a session key between two parties.

But on certain websites, when i opened google chromes security overview by clicking on the green https padlock, chrome informed me that the key exchange was done by ECDHE with P-256 (Eliptic Curve Diffe Hellman, curve P-256). But, upon opening the full certificate details for the website, the public key in the certificate was an RSA 2048 bit public key. But, this confused me, as i thought it should be an ECDHE key and i am not sure whether the key exchange is done by ECDHE, as chrome says, or RSA, which is the public key in the certificate, which i thought was used in the key establishment.

Any help would be appreciated.