i had this idea that a program can edit files in an encrypted environment. WinRaR with higher level of encryption would be the best way to describe it. but i was wonder if the files on a linux HDD or SDD are encrypted.
I do have this idea that you can save encrypted files to a cloud server and pull it out and unencrypted by a light weight program
- There is dmcrypt that basically does what you want. IDK if the implementation is in kernel space though. It works through /dev/mapper if that matters. - I’m too high to understand encrypt but it sounds close to what I want. I’ll have to research it later - Look up docs for cryptsetup which is the simplest way to use it. The Debian installer (and maybe others) can set it up for you automatically as well. 
 
 
- I do have this idea that you can save encrypted files to a cloud server and pull it out and unencrypted by a light weight program - Sounds like Cryptomator would work for you. 
- KDE has built in “vaults” now that sound maybe like what you’re looking for. 
- Storing files encrypted and decrypting them on-demand is called “encryption at rest”. Linux supports it but is not enabled by default. You can also encrypt /boot to get FDE (Full Disk Encryption) to ensure that the kernel or bootloader is not tampered with. Look into LUKS - This is not entirely correct. Many distributions do enable encryption by default. Also, encrypting the /boot partition does not guarantee the integrity of the boot sequence, you need to enable and correctly configure Secure Boot for that. 
 


