fall back to encrypting with bob's public key because SJCL already does a kem. run HMAC verification on message decryption