
The following figure illustrates how Pulsar encrypts messages on the producer side and decrypts messages on the consumer side. You can use the application-provided ECDSA (Elliptic Curve Digital Signature Algorithm) or RSA (Rivest–Shamir–Adleman) key pair to encrypt the session key (data key), so you do not have to share the secret with everyone. Pulsar uses a dynamically generated symmetric session key to encrypt messages (data). Only the consumers with a valid key can decrypt the encrypted messages.

You can use the public and private key pair that the application configures to perform encryption and decryption.


Applications can use Pulsar end-to-end encryption (E2EE) to encrypt messages on the producer side and decrypt messages on the consumer side.
