Yes, the file persistence in ModeShape 5 uses H2's MVStore, but that doesn't store binary data (i.e. binary values). The main issue with encryption for the main repository data is read performance: considering that H2 can encrypt/decrypt only an entire database (not a single row for example) and that in a typical ModeShape usage scenario repository churn is pretty high, constantly having to decrypt just to be able to read data would render the repository useless IMO (keeping the entire decrypted DB in memory is not an option).
Is there a recommended approach to encrypt binary data using filepersistence? The meta data can remain unencrypted.
When dealing with binary values you store them outside of the main repository data, in separate binary stores (there are several to choose from) - Built-in binary stores - ModeShape 5 - Project Documentation Editor and Binary values - ModeShape 5 - Project Documentation Editor So one option for example for encrypting binary data, is creating your own binary store and plugging that into ModeShape.
Thankyou for the answer. I will look further into the links you provided.