Quote from: Markley on June 11, 2017, 04:16:19 PM

signing is done using private keys, you verify the signature with the public key

Quote from: wingding on May 29, 2017, 11:03:37 PM

Quote from: ranochigo on May 29, 2017, 02:56:47 AM

Quote from: wingding on May 28, 2017, 01:15:20 PM

I ask because this may be useful if you want the sender to attach a private message to the receiver.

Achow has answered your question on the first part. As to your second part, you can use a public key to encrypt messages but you cannot really include them in your transaction.

Of course, you can encrypt and put the message in the OP_Return of the transaction.

I was more thinking about external handling of messages, like a server service. The sender use receiver's public key to encrypt a message, and sign it by using his public key from txin address.

You CAN use a public key to encrypt messages for the person with the corresponding private key to decrypt. Note that this isn't exactly the best way to encrypt messages and it doesn't provide as much security as a PGP encryption would.

Electrum has this implementation.