Finally implemented FEP-0806: Simple client-side encryption in Mitra Mini. Right now it only does encryption-decryption. No delivery yet - because gateways don't support EncryptedActivity activities.
The scheme was changed to HPKE (RFC 9180 Hybrid Public Key Encryption).