Key-private proxy re-encryption