Closes #1943 (closed).
This branch implements the cryptographic part of the design from proposal 359.