dapr/dapr#6197 implements two new APIs in Dapr:
EncryptAlpha1
DecryptAlpha1
Both APIs are stream-based, so the SDK is expected to read input as a stream, send it to Dapr using a streamed gRPC in chunks, and in parallel read the response from Dapr (in chunks sent over the same gRPC stream) and return a readable stream to the caller.
The reference implementation is in the Go SDK: dapr/go-sdk#387