# generate public/private key pair if [ ! -e rsa.pub ]; then fi openssl genrsa -out rsa.key 4096 openssl rsa -in rsa.key -pubout -out rsa.pub # generate a session key for symmetric encryption and encrypt it using RSA openssl rand 32 > AESKey openssl rsautl -encrypt -pubin -inkey rsa.pub -in AESKey -out AESKey_ecrypted # encrypt the plaintext with the session key openssl aes-256-cbc -e -in hybrid_plain.txt -out hybrid_cipher.txt -pass file:AE SKey -pbkdf2 # remove the session key rm AESKey