How are GitHub Secrets stored and decrypted?

Question

I read the official doc and googled about it, but find no discussion about how GitHub secrets exactly work. The official doc says:

GitHub uses a libsodiu