But they didn't roll their own crypto as far as I can tell. They used CryptoJS [1]. They just failed to use it correctly. EDIT: Here's the code https://github.

But they didn't roll their own crypto as far as I can tell. They used CryptoJS [1]. They just failed to use it correctly. EDIT: Here's the code https://github.com/cryptocat/cryptocat/blob/master/src/core/js/lib/multiParty.js#L37 https://github.com/cryptocat/cryptocat/blob/master/src/core/... [1] https://code.google.com/p/crypto-js/ https://code.google.com/p/crypto-js/