--- /dev/null
+#!/usr/bin/env bash
+
+# Description: Decrypts selected files using gpg. The contents of the decrypted file are stored in a file with extension .dec
+#
+# Note: If an appropriate private key cannot be found gpg silently prints a message in the background and no files are written.
+#
+# Shell: POSIX compliant
+# Author: KlzXS
+
+selection=${NNN_SEL:-${XDG_CONFIG_HOME:-$HOME/.config}/nnn/.selection}
+
+files=$(tr '\0' '\n' < "$selection")
+
+printf "%s" "$files" | xargs -n1 -I{} gpg --decrypt --output "{}.dec" {}
+
--- /dev/null
+#!/usr/bin/env bash
+
+# Description: Encrypts selected files using gpg. Can encrypt either asymmetrically (key) or symmetrically (passphrase).
+# If asymmetric encryption is chosen a key can be chosen from the list of capable public keys using fzf.
+#
+# Note: symmetric encryption only works for a single file as per gpg limitations
+#
+# Shell: POSIX compliant
+# Author: KlzXS
+
+selection=${NNN_SEL:-${XDG_CONFIG_HOME:-$HOME/.config}/nnn/.selection}
+
+printf "(s)ymmetric, (a)symmetric? [default=a] "
+read -r symmetry
+
+files=$(tr '\0' '\n' < "$selection")
+if [ "$symmetry" = "s" ]; then
+ gpg --symmetric "$files"
+else
+ keyids=$(gpg --list-public-keys --with-colons | grep -E "pub:(.*:){10}.*[eE].*:" | awk -F ":" '{print $5}')
+
+ #awk needs literal $10
+ #shellcheck disable=SC2016
+ keyuids=$(printf "%s" "$keyids" | xargs -n1 -I{} sh -c 'gpg --list-key --with-colons "{}" | grep "uid" | awk -F ":" '\''{printf "%s %s\n", "{}", $10}'\''')
+
+ recipient=$(printf "%s" "$keyuids" | fzf | awk '{print $1}')
+
+ printf "%s" "$files" | xargs -n1 gpg --encrypt --recipient "$recipient"
+fi
+