Features

This chapter covers the core features and capabilities of Encryption Toolkit.

Features

• AES-CBC encryption — file and string encryption with PBKDF2 key derivation
• RSA key generation — 2048 and 4096-bit key pair generation
• Secure hashing — SHA-256, SHA-512, and SHA-3 digests
• HMAC authentication — message authentication codes for data integrity
• Password vault — encrypted key-value store protected by a master password
• File encryption — encrypt/decrypt any file with integrity verification
• Base64 encoding — safe transport encoding for encrypted data
• Secure random — cryptographically secure random values via secrets module

Requirements

• Python 3.10+
• No external dependencies (stdlib only)

Quick Start

Follow this guide to get Encryption Toolkit up and running in your environment.

Quick Start

# Encrypt a file
python src/encryption_toolkit.py --mode encrypt --input secret.txt --password "MyP@ss"

# Decrypt a file
python src/encryption_toolkit.py --mode decrypt --input secret.txt.enc --password "MyP@ss"

# Hash a file
python src/encryption_toolkit.py --mode hash --input data.txt --algorithm sha256

# Generate an RSA key pair
python src/encryption_toolkit.py --mode keygen --bits 2048 --output keys/

# Store a secret in the vault
python src/encryption_toolkit.py --mode vault --action store --key "api_key" --value "sk-EXAMPLE"

# Retrieve a secret from the vault
python src/encryption_toolkit.py --mode vault --action retrieve --key "api_key"

Output

Encrypted files are written with a .enc extension. Key pairs are saved as PEM files. Hash digests are printed to stdout. Vault operations read/write an encrypted JSON store.