Deniable encryption

A public-key encryption scheme in which a sender who is forced to reveal both the message and the randomness used to encrypt it can instead produce convincing fake randomness explaining the ciphertext as an encryption of any alternative message.

TODO: syntax and security definition.