ouldn’t the private and public keys suffice?