The tunnel part isn’t exactly a crypto function, but the crypto makes it hard to detect. You can tunnel anything over http,, telnet, dns or sms too.