lockbox | Offline encryption of Kubernetes Secrets | Encryption library

I'm trying to create a button that reveals text when clicked. But I also need a terms and conditions checkbox that disables the button until checked. Once the checkbox and button have both been clicked it would reveal the text. Here's what I have so far, but without the checkbox:

My app encrypts and uploads certain files, and then makes them visible to admins. To achieve the latter functionality, my encryption gem's documentation suggests a controller action that looks like this:

I have a Delphi 10.4 program with a clientdataset, loading XML files users choose with OpenFile dialog. It works just fine and depending on the contents of the XML, the fielddef structure is set automatically.

Now I want to be able to read Decrypted files and with ClientDataSet.SaveToFile, save Encrypted files.

Currently I'm using Lockbox 3.7 to Decrypt the chosen file, creating a temp file, which is then read by loadfromfile. Likewise Savetofile writes data back to a temp file, which is then encrypted and given it's chosen name. It works very well, but leaves the temp file on disk. And even if I delete the temp file in code, it's relatively easy to recover it, if you know how. So the security with Encryption like this, is not so high after all.

I would want to be able to perform the decryption directly in LoadFromFile (and similar encryption at SaveToFile) as a fileEn(or De)Crypt function, as suggested by the subject, without the use of temp files, but haven't been able to find any useful functions.

Do anybody know of such function ? If so, please point me in the right direction. The last couple of days I've been using google to search for something useful, but it has left me more confused and lost, than I feel I was before.

An alternative solution where the temp files created by the LockBox EnCryptFile (and DeCryptFile) are completely destroyed, to a point where no recovery is possible, would do as a temporary solution, so pointers to ways to destroy a file completely, would also be welcome.

Thanks in advance for any help I can get.

is there a way or a library to encrypt/decrypt values with AES-256 mode GCM in Delphi? as it seems that most libraries do not support it like DCPcrypt or LockBox.

or maybe there is a Windows API that could handle that.

thanks in advance.

How do you test gem functionality? I'm trying to figure out why something isn't working the way the docs suggest, and set up my own version of these. Yet my test fail:

I have a Patient model backed by a patients Postgres database table. It has an attribute national_id that is encrypted by the lockbox gem and therefore stored in the national_id_ciphertext column. This attribute is saved/updated fine and I can verify this in the database.

However when I read this record back, the national_id attribute is not included.

Rails console:

I used lockbox gem to encrypt the column values and blind_index to query.

This is working:

I have users table and redemptions Table. So for security reasons we have encrypted our users table email and mobile column.

User Table columns before encryption:

I am trying to use the Lockbox gem to encrypt Devise User emails as per: https://ankane.org/securing-user-emails-lockbox. I've added the lockbox and blind_index gem, run the migrations (with a text field for :email_ciphertext as per https://github.com/ankane/lockbox, e.g.: