nil-verifiable-encryption