[krallin]

In this specific case it wouldn't be very practical as changing the password would mean changing the encryption key to all your files. Hence, rendering all files unreadable.

That's why I suggested that a more appropriate application would be to derive a key from the password (using a PBKDF, which PKCS5 is (PBKDF2)) and use that one to encrypt the file encryption key.

This way, you can always change the password (provided you still have it) and encrypt the encryption key again, while not needing to encrypt each file.