The key exchange was/is totally custom without using anything standard, though it uses standard concepts (DH, though it does some non-standard things with it),

The key exchange was/is totally custom without using anything standard, though it uses standard concepts (DH, though it does some non-standard things with it), which *might* be secure, but as far as I know, never actually put to the test.