For encrypt/decrypt on file operations, a stackable filesystem needs to exist between VFS and the lower filesystem(suppose ext4) and that is what wrapfs and ecryptfs does. Regards, Saket Sinha