Gocryptfs is an encrypted overlay filesystem written in Go. It features a file-based encryption that is implemented as a mountable FUSE filesystem.

Gocryptfs was inspired by EncFS and strives to fix its security issues while providing good performance. Gocryptfs is as fast as EncFS in the default mode and significantly faster than paranoia mode in EncFS, which provides a security level comparable to Gocryptfs.

On CPUs without AES-NI, gocryptfs uses OpenSSL through a thin wrapper called stupidgcm. This provides a 4x speedup compared to Go's builtin AES-GCM implementation.