Sender

Encrypts the payload to the receiver's public key.

Info Additional data Payload Seal

Receiver

Generates a key pair and recovers the payload.

Ciphersuite DHKEM(X25519, HKDF-SHA256) · HKDF-SHA256 · ChaCha20Poly1305 DHKEM(X25519, HKDF-SHA256) · HKDF-SHA256 · AES-128-GCM DHKEM(P-256, HKDF-SHA256) · HKDF-SHA256 · AES-128-GCM ML-KEM-768 + X25519 · SHAKE256 · ChaCha20Poly1305 ML-KEM-768 · HKDF-SHA256 · ChaCha20Poly1305 ML-KEM-768 + P-256 · SHAKE256 · AES-256-GCM Generate key pair Public key (pk) Private key (sk)

---

Encapsulated key (enc) Ciphertext (ct) Open Decrypted payload