DD Replicator can be used with the optional DD Encryption feature, enabling encrypted data to be replicated using collection, directory, or MTree replication.
Replication contexts are always authenticated with a shared secret. That shared secret is used to establish a session key using a Diffie-Hellman key exchange protocol. That session key is also used to encrypt and decrypt the protection system encryption key when appropriate.
