I built an encryption service. It's called rypt, and it's backed by GCP Cloud KMS. A while back I wrote about envelope encryption. I still think it's important. But setting up a KMS, IAM roles, key rings, and audit logging just to encrypt some user data is a lot. Especially if you're one person or a small team. I wanted something where you sign up, get a key, and make a curl request. So that's what rypt is. You send data over HTTPS, and you get ciphertext back. You can also use envelope mode, where you generate a DEK yourself...