Searchable encryption in a public-key setting