Hey, I used to work with their CTO! Hopefully he'll respond himself, but in case he doesn't: > (384-bit prime) - Why not just use X448 since that's now an Int

Hey, I used to work with their CTO! Hopefully he'll respond himself, but in case he doesn't: > (384-bit prime) - Why not just use X448 since that's now an Internet Standard? I believe they started working before X448 was standardized. > It also uses Fortuna for IVs, etc. instead of directly /dev/urandom (or window.crypto in JS land). Userspace CSPRNGs are a devastatingly stupid idea. IE doesn't have great support for window.crypto. If you're building an enterprise product, you probably care about this. > FUD. Where you host the data shouldn't matter, because the server should never be given access to your plaintext. I believe their point here was that most cloud services today DO have access to your plaintext. It's not FUD if it's true =). I know I'm a bit biased, but these guys are pretty smart, and I'd trust them.