Encryption functionality available from the ESP-IDF

[skanky]

Our ESP32 S3 application needs to encrypt data we generate before it is stored to a SD card and then decrypt it later when copying the data off. We need to use a key pair to do this - one key stored in plain sight to encrypt the data, and the other private key provided to the ESP32 S3 at the point of needing to decrypt the data.
I can see the EDP-IDF has various encryption functionality built-in for flash memory, NV memory, TLS, WiFi etc, however on a quick scan through the docs I can't see a section covering using the encryption algorithms directly and what's available. I'm no encryption expert and was hoping there would be nice ready to go functions I can use. Is anyone able to point me towards any resources that cover this?

[MicroController]

ESP-IDF comes with the mbedtls library, see https://docs.espressif.com/projects/esp ... edtls.html, docs: https://github.com/Mbed-TLS/mbedtls/blo ... started.md
Apparently, you can also swap in wolfSSL instead: https://github.com/espressif/esp-wolfSSL

[skanky]

Thank you