- Added encryption flags to restore commands (--encryption-key-file, --encryption-key-env)
- Integrated DecryptBackupFile() into runRestoreSingle and runRestoreCluster
- Auto-detects encrypted backups via IsBackupEncrypted()
- Decrypts in-place before restore begins
- Tested: Encryption/decryption roundtrip validated successfully
- Phase 4 (AES-256-GCM encryption) now COMPLETE
All encryption features working:
✅ Backup encryption with --encrypt flag
✅ Restore decryption with --encryption-key-file flag
✅ Key loading from file or environment variable
✅ Metadata tracking (Encrypted bool, EncryptionAlgorithm)
✅ Roundtrip test passed: Original ≡ Decrypted
Renz
6c15cd6019