General purpose distributed encrypted file system

A computer program product having instructions stored in a computer readable storage device, for execution by a computer, said computer program product comprising:

• instructions stored in said computer readable storage device for generating an initialization vector;
• instructions stored in said computer readable storage device for generating a file key, wherein the file key is new and unique;
• instructions stored in said computer readable storage device for generating a first block key by combining said initialization vector with said file key;
• instructions stored in said computer readable storage device for encrypting a first data block with said first block key;
• instructions stored in said computer readable storage device for encrypting said first block key with a public key associated with a user;
• instructions stored in said computer readable storage device for associating said encrypted first block key with said encrypted first data block as crypto metadata;
• instructions stored in said computer readable storage device for caching said encrypted first data block and said crypto metadata in a local encryption cache;
• instructions stored in said computer readable storage device for sending said encrypted first data block and said crypto metadata to a network file system server wherein said cached encrypted data block and said crypto metadata remain on one of a client or said network file system server until receipt of a return code indicating successful writes of said encrypted first data block and said crypto metadata by said network file system server;
• and,
• instructions stored in said computer readable storage device for generating a second block key by combining said encrypted first data block with said file key and clearing said cached encrypted first data block and said crypto metadata upon receipt of the return code indicating successful writes of said encrypted first data block and said crypto metadata by said network file system server.