We don't have any more detailed documentation than this, and for now all the encryption will happen at the application level. You should be able to use a tool/library like OpenSSL to do most of the heavy lifting for you, so it's mainly a matter of deciding what encryption schemes you wish to use.