There is a full description of the key management and encryption scheme in the security page.