Whelp, I felt like contributing:
( or how to make mr robot's cds )
You will use ccrypt & openbsd's kernel

cat archive.tgz.bz2| ccrypt -c -e -f > file
cat ../file| ccrypt -d -c -f > fil

dd if=/dev/zero of=/lame/secrets/cryptfile bs=1024 count=51200

vnconfig -ck -v vnd0 cryptfile

disklabel -E vnd0
newfs vnd0a
mount vnd0a /mnt
cp cryptfile /mnt
umount /mnt
vnconfig -u -v vnd0

mpg123 -w ~/out.wav
mv cryptfile cryptfile.wav
cdio -f cd0c tao -a *.wa


Want to get it back?

cdparanoia -Q
cdparanoia -Q -d /dev/cd0c
cdparanoia -d /dev/cd0c -w TRACK_NUMBER CRYPT_FILE

( you can replace the os dependent parts with linsuxs loop back or truecrypt )