First a hypothetical situation:
Key1: Is a password (let's say
"TooMuchEncryption") and then hashed with SHA256
Let's say you have 3 files, first you encrypt the files with AES256 with
Key1 and then package them into a zip file. Then when you send it to a friend, you encrypt that whole zip file with the public key of your friend with PGP and you send it to him via a TCP channel.
Forget the time, because of course: this road would take a 'very' long time on a avarage computer (4 cores, 8 threads) (right?).
But it is secure. The chance anyone will decrypt those 3 files, is quite small (assuming they don't have those keys and they intercepted it by listening to the TCP channel).
But are these files 'over-encrypted'? Does it even make sense to apply so much encryption (first AES then PGP)? Would just zipping that file and protect that with