This is correct. Details about it's usage of encryption is here: https://restic.readthedocs.io/en/v0.4.0/Design/#keys-encrypt...