Post #4033227
2026-07-22 21:06 UTC
@greyarea@mitra.vpclmulqdq.moe
having the sender generate an ephemeral keypair (include the public key envelope)
So the recipient will need to encrypt to this ephemeral key when replying?
Replies (1)
-
@greyarea@mitra.vpclmulqdq.moe 2026-07-22 21:54
@silverpill@mitra.social No, the recipient would also generates an ephemeral key, and uses that when replying. So it's always a one shot ephemeral (sender)/static (recipient) HPKE exchange, with sender authenticity guaranteed by the signature. Could also use the shared secret from the original post but force a different IV, but "replies are just the sender and receiver being flipped, code path is the same" is easier.