Interesting indeed! But I couldn't find anything on the website or documentation about how secrets are encrypted?

The security page seems to be a generic one about reporting vulnerabilities: http://vaultproject.io/security.html

Edit: Found it under the threat model section here: https://vaultproject.io/docs/internals/security.html