From the website of GNU Privacy Guard (GnuPG):

If an attacker could decrypt a session key it would only be useful for reading the one message encrypted with that session key. The attacker would have to start over and decrypt another session key in order to read any other message.

From my understanding, if an attacker is able to decrypt a session key which was encrypted through a public key, then the attacker practically has the corresponding private key pair.

Hence, it is no difficult feat to decrypt any further session keys encrypted by such a public key.

How is a session key makes this any more secure? I can only see this as redundant security.

From the website of GNU Privacy Guard (GnuPG):

If an attacker could decrypt a session key it would only be useful for reading the one message encrypted with that session key. The attacker would have to start over and decrypt another session key in order to read any other message.

From my understanding, if an attacker is able to decrypt a session key which was encrypted through a public key, then the attacker practically has the corresponding private key pair.

Hence, it is not difficult to decrypt any further session keys encrypted by the public key.

How does a session key make this any more secure? I can only see this as redundant security.

https://www.gnupg.org/gph/en/manual/x209.html

if an attacker could decrypt a session key it would only be useful for reading the one message encrypted with that session key. The attacker would have to start over and decrypt another session key in order to read any other message.

From my understanding, if an attacker is able to decrypt a session key which was encrypted through a public key, then the attacker practically has the corresponding private key pair.

Hence, it is no difficult feat to decrypt any further session key encrypted by such public key.

How is a session key makes this any more secure? I can only see this as a redundant security.

From the website of GNU Privacy Guard (GnuPG):

If an attacker could decrypt a session key it would only be useful for reading the one message encrypted with that session key. The attacker would have to start over and decrypt another session key in order to read any other message.

From my understanding, if an attacker is able to decrypt a session key which was encrypted through a public key, then the attacker practically has the corresponding private key pair.

Hence, it is no difficult feat to decrypt any further session keys encrypted by such a public key.

How is a session key makes this any more secure? I can only see this as redundant security.