I agree that using the command line for this type of problem is going to be problematic. I also see clearly how hashing the encrypted data before "storing it a

I agree that using the command line for this type of problem is going to be problematic. I also see clearly how hashing the encrypted data before "storing it at this 3rd party" would allow you to verify CBC block modifications. I guess I don't understand GPG well enough to see how it solves this problem better than AES CBC 256. Could you perchance provide a link? Or explain how GPG would take care of this?