A filesystem in userspace (FUSE) with transparent encryption (when writing) and decryption (when reading).