use public key for encryption