Ephemeral authenticated encryption allows to anonymously send message to a recipient given their public key.

Only the recipient can decrypt these messages using their own secret key. While the recipient can verify the integrity of the message, they cannot verify the identity of the sender.

A message is encrypted using an ephemeral key pair, with the secret key being erased right after the encryption process.

Without knowing the secret key used for a given message, the sender cannot decrypt their own message later. Furthermore, without additional data, a message cannot be correlated with the identity of its sender.

import qualified Sel.PublicKey.Seal as Seal

main = do
  -- We get the recipient their pair of keys:
(recipientPublicKey, recipientSecretKey) <- newKeyPair
  encryptedMessage <- Seal.encrypt "hello hello" recipientPublicKey
  let result = Seal.open encryptedMessage recipientPublicKey recipientSecretKey
  print result
  -- "Just \"hello hello\""