The certificate used in https://de.wikipedia.org/wiki/Authenticated_Encryption has
- public key ECC
- public key parameter ECDSA
- key usage digital signature
It is used to setup a secure TLS connection.
So far I know, that a so called pre-master-secret is generated by client ant sent encrypted to the server, using its certificate.
But what crypto-primitive is used for encryption in that case? The public key is used for digital signature, ECDSA, but signing something is NOT encryption.
How then is the pre master secret encrypted?