---

mkdir C:\lab -Force; cd C:\lab

$cert = New-SelfSignedCertificate -Subject "CN=LabCert" -Type DocumentEncryptionCert -KeyAlgorithm RSA -KeyLength 2048 -CertStoreLocation Cert:\CurrentUser\My

Export-Certificate -Cert $cert -FilePath C:\lab\cert.cer
$pass = ConvertTo-SecureString "123456" -AsPlainText -Force
Export-PfxCertificate -Cert $cert -FilePath C:\lab\cert.pfx -Password $pass

"Иванов Петров Сидоров" | Set-Content C:\lab\a.txt -Encoding UTF8
"Иванов Петров Сидоров" | Set-Content C:\lab\b.txt -Encoding UTF8

Protect-CmsMessage -To $cert -Path C:\lab\a.txt -OutFile C:\lab\a.enc

$c = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2("C:\lab\cert.cer")
$pub = [System.Security.Cryptography.X509Certificates.RSACertificateExtensions]::GetRSAPublicKey($c)
$pad = [System.Security.Cryptography.RSAEncryptionPadding]::OaepSHA256
[IO.File]::WriteAllBytes("C:\lab\b.enc", $pub.Encrypt([IO.File]::ReadAllBytes("C:\lab\b.txt"), $pad))

dir C:\lab