What a recipient needs before trying a passphrase

Auth: Anonymous - no token required.

Returns the key-derivation parameters for a secret and whether there is anything left to release. Deliberately NOT the ciphertext: knowing the salts alone gives an attacker nothing to work offline against. Anonymous by design — the recipient is usually not a Panoptic user.