Cryptographic technique where a proxy can transform ciphertext from one key to another without learning the plaintext.