Hello, Currently, Org mode never tangles code blocks when they reside inside encrypted subtrees. Never means that such code blocks will _not_ be tangled even if encrypted subtree is temporarily decrypted via org-decrypt-entry/org-decrypt-entries in the current buffer.
The current approach is indeed safe as it prevents leaking potentially sensitive information. However, it is sometimes necessary to tangle the code blocks from inside encrypted trees as well. For example, if the file is a literate Org config - the whole point of such config is to tangle it, including encrypted parts. To allow tangling encrypted code, we may provide a special tag :TANGLE: or maybe a special heading property, like :TANGLE-ENCRYPTED: yes. If such property is set in the encrypted heading, Org will decrypt and tangle the code blocks inside. WDYT? -- Ihor Radchenko // yantar92, Org mode contributor, Learn more about Org mode at <https://orgmode.org/>. Support Org development at <https://liberapay.com/org-mode>, or support my work at <https://liberapay.com/yantar92>