Hello woodruffw, Thanks so much for the suggestions. Any PR is welcome to improve it :)
I think you should put a note in the README disclaiming the cryptographic and key generation problems in this program. Not doing so is probably going to result in people relying on cryptographic properties it cannot provide.
My suggestion is you delete the codebase until you know what you are doing.
Maybe take a look at a book like https://www.manning.com/books/real-world-cryptography or https://nostarch.com/seriouscrypto