I was wondering about whether there exists a scheme that would have the following properties:
- Be asymmetric (Encrypt with public key, decrypt with private key)
- Be secure by today's standards (as hard as RSA 2048)
- Short public key
Real life application is to enable people to communicate the public key over the phone to the sender so that the sender can encrypt messages using the receiver's public key. There is no network between the sender and receiver.