Your data has to be decrypted somewhere to be useable, how would that work?

As direwolf20 says below, at the endpoints.

For a real world example, check out Tahoe LAFS: https://github.com/tahoe-lafs/tahoe-lafs

at the endpoints

[dead]