See "Hybrid encryption and the KEM/DEM paradigm": https://neilmadden.blog/2021/01/22/hybrid-encryption-and-the-kem-dem-paradigm/ https://neilmadden.blog/2021/0

See "Hybrid encryption and the KEM/DEM paradigm": https://neilmadden.blog/2021/01/22/hybrid-encryption-and-the-kem-dem-paradigm/ https://neilmadden.blog/2021/01/22/hybrid-encryption-and-the... tl;dr: resistance to padding attacks, better support for non-RSA cryptosystems