That's the whole reason I wrote Getting Started with GnuPG and GPG. The write-up was
a generalization of the Credit Card encryption scheme we used to
use (but since then we've moved on to using a realtime payment
gateway and we never hold in permanent storage the CC number).