root/public: links for decryption