Thanks, merged!

Yes, the main reason I wrote it is asymmetric cryptography.

> the main reason I wrote it is asymmetric cryptography

Why do you prefer asymmetric cryptography instead of whatever restic and attic/borg are using?

Asymmetric cryptography means that the private key doesn't need to be stored on the client or the server.

If you have someone's public key, and no other key material whatsoever, you can encrypt something in a way that only they can read it. Even you can't decrypt it.

(Because asymmetric cryptography is slow, if your messages are large you'd typically encrypt the data with a symmetric key, and then encrypt just that key asymmetrically.)