Try reading up this guide for a great intro into application level crypto... https://tozny.com/security-guides/