Is it possible to combine EVP Authenticated encryption using GCM mode with EVP Asymmetric Encryption and Decryption of an Envelope?
At least the PHP-openssl extension openssl_seal() does not seem to support this, and that example in the OpenSSL-Wiki does not use GCM mode and consequently does not care about the authentication tag, which somehow would have to be remembered after sealing the data and to be installed in the cipher context when restoring the data.