Metadata-Version: 2.4
Name: pnasys-ses
Version: 0.1.1
Summary: PNASystems Secure Encryption Service — TPM/file vault with access+encryption keys
Author: PNASystems
Project-URL: Homepage, https://github.com/Goplop0959/pnasys-ses
Project-URL: Repository, https://github.com/Goplop0959/pnasys-ses
Project-URL: Issues, https://github.com/Goplop0959/pnasys-ses/issues
Requires-Python: >=3.10
Description-Content-Type: text/markdown
Requires-Dist: pnasys-encryption-service>=1.12
Requires-Dist: cryptography>=41

# pnasys-ses — PNASystems Secure Encryption Service

TPM-backed (Windows DPAPI) / AES-backed (everywhere else) vault with
**two-key** access: you need both the access key (file selector) and the
encryption key (mixed into the transport key) to open anything.

```python
from pnasys_ses import SecureEncryptionService
SecureEncryptionService.BasePath = os.getcwd()  # optional override
SecureEncryptionService.CreateEncryptedFile(Data, AccessKey, EncryptionKey)
SecureEncryptionService.CreateEncryptedFile(Data, AccessKey, EncryptionKey, "C:\\Example")
plain = SecureEncryptionService.DecryptEncryptedFile(AccessKey, EncryptionKey)
plain = SecureEncryptionService.DecryptEncryptedFile(AccessKey, EncryptionKey, "C:\\Example")
```

Files land at `<base>/sha256(AccessKey).json`. Default base:
`%LOCALAPPDATA%/PNASystems/SES` on Windows, `~/.pnasys_ses` elsewhere.

Interactive CLI: `pnases` (create/read/list/delete loop).
