There is a really nice specification for the authenticated encryption wrapper described above, as a standalone protocol element (i.e. usable independent of emai

There is a really nice specification for the authenticated encryption wrapper described above, as a standalone protocol element (i.e. usable independent of email/tor/etc): https://eprint.iacr.org/2008/475 https://eprint.iacr.org/2008/475 It's already in use by the Lightning Network.