The encryption is called fcrypt, and it's a lot like des. Some would say it's not as strong as des but in practice I wouldn't worry too much about someone cracking my traffic. Phil Moore might feel differently. Various people have talked about putting Kerberos V support in afs with support for multiple encryption types, but as far as I know it's just talk.