ssh-keygen
follow all prompts
go install ess
ess encrypt -i <input file> -o <output file> -k <public key>
note: the public key is the one that ends in .pub (e.g. ~/.ssh/id_rsa.pub)
ess decrypt -i <input file> -o <output file> -k <private key>
note: the private key is the one that does not have an extension (e.g. ~/.ssh/id_rsa)