Encrypter instance for a single file. This is not a managed writer; it must be assisted with a separate reader that passes it blocks of data to encrypt.