A security engineer is analyzing a packet capture of an HTTPS session between a client and a web server. She observes that during the connection setup, the client and server negotiate a cipher suite, the server presents its certificate, and both sides derive a shared symmetric key without that key ever traversing the wire in plaintext. Which cryptographic function is responsible for allowing both endpoints to establish this shared symmetric key while using the server's public/private key pair only for authentication and key agreement?