I'd go for an external program that does the encryption. On most unices there is openssl which can do stuff like that from the commandline, but i guess your users aren't on unix (or 'kings of the commandline').

If you use email as your way of transportation of files, you could think of using PGP or GPG as a way to do public-private key encryption-type things.