After discovering Tomb, and a few personal issues with it, I decided to write a very similar program that doesn’t require root access and compiles to a single binary: Graveyard.
Additional information and source code: GitHub.
Also, sorry about the ugly terminal colors, I recently just switched to Artix and haven’t gotten around to making everything look amazing.
Edit: Cleaned up some stuff
Again, I’m not a security expert, so maybe your original version was fine for this use case.
But since dedicated password-based key derivation functions exist, you should probably stick to one of those instead of rolling your own.
Thanks for fixing this quickly!