S/MIME encryption on Cisco Secure Email Gateway works in two phases:
- A pseudo-random session key (symmetric key) is created to perform the actual message encryption.
- The message body is encrypted with this session key, ensuring confidentiality.
The session key itself is then encrypted with the recipient's public key, but the core phases of S/MIME encryption are the generation of the session key and the encryption of the message body with it.