Signal is encrypted at rest. It uses a special encrypted version of Sqlite. https://www.zetetic.net/sqlcipher/