TLS connections are encrypted with either AES 256 or AES 128 ciphers. At start-up a negotiation decides between these two options.
No passwords are stored in clear text within the IED. A hashed representation of the passwords with SHA 512 is stored in the IED. These are not accessible from outside via any ports.