Yes, proof covers all properties of the activity. But I can't omit encap_key, it is required by SetupBaseR function defined in section [5.1.1](https://www.rfc-editor.org/rfc/rfc9180.html#name-encryption-to-a-public-key )
I've read a bit more about DHKEM and now I am even more confused. Isn't encap_key an ephemeral key? The library I am using describes it as such:
https://docs.rs/hpke/latest/hpke/trait.Kem.html#tymethod.encap_with_rng
> Derives a shared secret and an ephemeral pubkey that the owner of the reciepint’s pubkey can use to derive the same shared secret.
This "ephemeral pubkey" is what I labeled as encap_key. It is later included in fep0806:cipherData
-----
I think it's okay to have no forward secrecy, the goal of this FEP is to describe a simple encryption mechanism that anyone can implement. I'll just warn readers about its weakness.
