designate an on-chain address whose ECDSA public key is used for encrypting sensitive data off-chain. By recovering the user’s uncompressed public key on-chain, you can encrypt payloads so that only the holder of the matching private key can decrypt them.