[ameliaquining]

The linked proposal is basically a user-friendlier version of that, unless you have some other security property in mind that I've failed to properly understand.