Comment by yoha

Yes, it's possible, and it is an area of research in cryptography. For instance, have a look at Helios and Belenios.