You would encrypt/decrypt the content, before transmit/receive. But know that there is no way to prevent someone from listening - packet sniffers can capture all packets, it's just that the content is encrypted.

I don't have a specific module to recommend, but whatever it is, it will provide its own documentation on how to use it.