encryptbox gives you envelope encryption (the same pattern AWS KMS uses) in a local CLI. Rotate your master key without touching encrypted files. Every operation gets logged in a tamper-evident audit ...
then RSA private-encrypts each chunk into a 256-byte block. parser = argparse.ArgumentParser(description="Encrypt a Conquer game data file with an RSA private key.") parser.add_argument("data_file", ...