# HPKE.Recipient A type that represents the receiving side of an HPKE message exchange. ``` struct Recipient ``` ## Overview To decrypt and verify the identity of encrypted messages, initialize a `Recipient` specifying the appropriate cipher suite, the receiver’s private key, the encapsulated symmetric key, and the additional cryptographic material relevant to your chosen mode of operation. Call [`open(_:)`](/documentation/CryptoKit/HPKE/Recipient/open(_:)) or [`open(_:authenticating:)`](/documentation/CryptoKit/HPKE/Recipient/open(_:authenticating:)) on the `Recipient` instance for each message in turn to retrieve its cleartext. The recipient of the messages needs to process them in the same order as the `Sender`, using the same cipher suite, encryption mode, and key schedule information (`info` data). Use a separate `Recipient` instance for each stream of messages. ## Topics ### Initializers [`init(privateKey: SK, ciphersuite: HPKE.Ciphersuite, info: Data, encapsulatedKey: Data) throws`](/documentation/CryptoKit/HPKE/Recipient/init(privateKey:ciphersuite:info:encapsulatedKey:)-6jqhf) Creates a recipient in base mode. [`init(privateKey: SK, ciphersuite: HPKE.Ciphersuite, info: Data, encapsulatedKey: Data) throws`](/documentation/CryptoKit/HPKE/Recipient/init(privateKey:ciphersuite:info:encapsulatedKey:)-7v86b) Creates a recipient in base mode. [`init(privateKey: SK, ciphersuite: HPKE.Ciphersuite, info: Data, encapsulatedKey: Data, authenticatedBy: SK.PublicKey) throws`](/documentation/CryptoKit/HPKE/Recipient/init(privateKey:ciphersuite:info:encapsulatedKey:authenticatedBy:)) Creates a recipient in authentication mode. [`init(privateKey: SK, ciphersuite: HPKE.Ciphersuite, info: Data, encapsulatedKey: Data, authenticatedBy: SK.PublicKey, presharedKey: SymmetricKey, presharedKeyIdentifier: Data) throws`](/documentation/CryptoKit/HPKE/Recipient/init(privateKey:ciphersuite:info:encapsulatedKey:authenticatedBy:presharedKey:presharedKeyIdentifier:)) Creates a recipient in authentication and preshared key mode. [`init(privateKey: SK, ciphersuite: HPKE.Ciphersuite, info: Data, encapsulatedKey: Data, presharedKey: SymmetricKey, presharedKeyIdentifier: Data) throws`](/documentation/CryptoKit/HPKE/Recipient/init(privateKey:ciphersuite:info:encapsulatedKey:presharedKey:presharedKeyIdentifier:)) Creates a recipient in preshared key (PSK) mode. ### Instance Methods [`func exportSecret(context: Context, outputByteCount: Int) throws -> SymmetricKey`](/documentation/CryptoKit/HPKE/Recipient/exportSecret(context:outputByteCount:)) Exports a secret given domain-separation context and the desired output length. [`func open(C) throws -> Data`](/documentation/CryptoKit/HPKE/Recipient/open(_:)) Decrypts a message, if the ciphertext is valid. [`func open(C, authenticating: AD) throws -> Data`](/documentation/CryptoKit/HPKE/Recipient/open(_:authenticating:)) Decrypts a message, if the ciphertext is valid, verifying the integrity of additional authentication data. ## Relationships ### Conforms To [`Sendable`](/documentation/Swift/Sendable) [`SendableMetatype`](/documentation/Swift/SendableMetatype) --- Copyright © 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)