Looks like I should try using tar with aespipe. Something like: tar czv /etc | aespipe -p 3 -e AES256 -C128 3< /etc/aespipe.pwd > etc.tgz This actually appeared to work, but I haven't succeded in unencrypting it yet.