On the Security of Hybrid Public-Key Encryption