The recipient can calculate the encryption key for kind13 using their own private key and the sender's public key. They only need to disclose this encryption key, not their own private key, to prove that the message was written by the sender, right? I'm not a cryptography expert, so I'm not 100% certain.