I don’t see how encryption is required there. Strong cryptographic authentication, yes—but that could be as easy as an HMAC with a key shared offline.

The HIPAA information is a great example of what should be kept off the amateur bands, except in an emergency when forgoing encryption is appropriate.