# Tag Info

Yes, you can do that. Start by generating a random key and encrypting the data under that key. Now, you in turn encrypt that key with your password-derived key. The twist is that you include the already encrypted file in your PBKDF. So you generate a random key $k$ and then encapsulate it as $\mathcal{E}_{k'}(k)$, where \$k' = H(PBKDF(\text{password}) \| ...