Signet Forge

AES-256 key used to encrypt the Parquet footer

AES-256 key applied to all columns (if same key was used for all)

Additional Authenticated Data prefix bound into GCM auth tags

Override specific columns with different keys: {"column_name": "hex_key"}