Why it matters
Symmetric keys need a shared secret first. Public-key cryptography solves the bootstrap problem:
- a chip card proves it is genuine to any terminal;
- a key distribution host sends keys to a device it has never met;
- two hosts set up TLS.
RSA, with certificates organised in a PKI, is still the workhorse in payments.