could probably do it with something better than RSA and save a ton of bytes for encrypting the AES key but this was already headache enough, lol