Conversation

@measlytwerp gpg can do that. Encryption happens at write-time using the public keys of the authorised users. Authorised users then decrypt at read-time using their own private key.

You can encrypt the same file with multiple keys, so that any of the authorised users can decrypt. Re-encrypting when the authorised users list changes is possible, but someone would need to decrypt it first (iirc).