r/cryptography•10 mo. agoNational-Okra-9559Primitive for f(Enc(tag,k1),x)=Enc(tag,k2) without revealing tag and k1/k2?[removed]Posted Dec 10, 2025, 3:04 PM UTC · locked11ShareSave