Oh, the DB IR codes are definitely encrypted alright. In a form much like the Protected ProntoScript.

The first 4-6 bytes are not encrypted as the extender needs to know the format and the amount of time to send the IR code (Duration). However, the remainder of the data is.