The design is very easy here, google it, you will find one. I suspect the interviewer was looking for details on cryptographic details (shared public key, etc...). I had little knowledge about the details on the symmetric key encryption. I guess that was a reason for the rejection.