I would recommend disk encryption using cryptsetup if you are planning on installing on a new computer.
If the need is to encrypt only files, ccrypt would be nice. According to man page of ccrypt, it has encryption "equivalent" to 256 bits AES.
Of course, if you use GPG, that's likely to be the safest since you can sign the files and encrypt it and the key is needed to decrypt the files.
Hope that helps.
P.S. If something I have said here is wrong, someone please correct me.