No device info was included by OP. Assuming BSD or Linux kernel, they both offer tiny simple full extent kernel block device encryptors upon which their standard filesystems can be laid down. Insufficient info given by OP to fit others.