I wrote a blog post that provides a fairly detailed overview of the data encryption capabilities that the Ping Identity Directory Server provides.