There is no need for the decryption to double the needed size. You can chunk it to something reasonable and effectively rewrite the file in place.