It supports secure storage at the system level through a standard Unix file system interface to encrypted files.
Users associate a cryptographic key with the directories they wish to protect.
CFS employs a novel combination of DES stream and codebook cipher modes to provide high security with good performance on a modern workstation. System management functions, such as file backup, work in a normal manner and without knowledge of the key. ESM is an encrypted session layer for managing remote encrypted sessions. If you don't trust me, go and check the sources. If you live in a country like France or China, you wont have the freedom at all to use cfs or esm.