mneme.crypto

derive_subkey(dek, keyspace_name) -> subkey

Derive a per-keyspace encryption sub-key from the DEK