My comment would be: Asymmetric cryptography is used to protect the session key used for Encryption and HMac.