Is there any way to implement encryption/decryption using ECC, like RSA does? For example, say some user wants to send a message containing a symmetric key to user
X. Then, in RSA, I could just encrypt the symmetric key using
X's public key, and only
X can decrypt using his private key. In my particular application, it's important that the receiver does not know the sender's public key.
However, in ECC (at least using OpenSSL), I've only seen support for signing and DH.
I've done some research on ElGamal encryption, but I think I read that the encrypted message is doubled in size. I would like to use 256 bit ECC to encrypt a 256 bit plaintext to a 256 bit ciphertext.
Thanks in advance to anyone who can help.