That is exactly what the project does: "Every time a new file is being written, owefs_encrypt creates a one-time random key. The random key is encrypted using

That is exactly what the project does: "Every time a new file is being written, owefs_encrypt creates a one-time random key. The random key is encrypted using the public key and is embedded in the new file. The contents of the file are encrypted using such random key."