256-bit AES encryption at rest versus TLS 1.2 in transit