Method and apparatus for limiting access to data by process or computer function with stateless encryption

A method for stateless encryption or decryption of files associated with a content management system, comprising:

• determining, for a string of data, a base block number based on a read/write address and a block size;
• setting a start value of a counter based on the base block number and the block size translated from the read/write address;
• determining a number of blocks to encrypt or decrypt based on a size of read/write data;
• determining a count value of the counter based on the base block number and the number of blocks to encrypt or decrypt;
• writing a block number of a first block to an initialization vector (IV) string;
• encrypting or decrypting the IV string with an encryption key to generate ciphertext;
• logically combining the ciphertext with the first block;
• and
• decrementing the count value of the counter by the block size and repeatedly performing the logically combining steps until a loop count is exhausted to provide the stateless encryption or decryption of files associated with the content management system.