https://defuse.ca/audits/encfs.htm https://defuse.ca/audits/ecryptfs.htm

Probably better to use ecryptfs or dm-crypt.