Premis lock uses the standard 128-bit AES encryption and the session-based Station-to-Station protocol which is encrypted with HKDF-SHA-512 derived keys based on per-session Curve25519 keys.