The idea of cfs (Cryptographic Filesystem) is to have an utility that
allows the user to save files in an encrypted way, to protect it from
being read/modified by other users. The setting of permissions of a file
can prevent other "regular" users from reading (modifying)
your files, but that is no prevention against the superuser (root). Or
in case some one can guess your password, or some other security breach.
So, cfs allows you to encrypt files with some other key (it could be
your password, but for obvious reasons you should choose another key).
Below you will find the basic way cfs works.
Using cfs
cmkdir crypt-dirYou will be asked for a key; enter something long (but easy to remember).
cattach crypt-dir pablo-3897123
cd /var/cfs/pablo-3897123and work in it as you do in any other directory.
cd cdetach pablo-3897123
If you forget your key, there is no way you can recover your files (unless you break the encrpytion, which is not so easy). Not even the superuser will be able to get them (remember, cfs also protect your files from the superuser!).