You've added another dependency into the mix here. I've been comfortable storing my database in Dropbox, with a decent length master password (15char+) on the

You've added another dependency into the mix here. I've been comfortable storing my database in Dropbox, with a decent length master password (15char+) on the assumption that it uses a high quality hash that would make bruteforcing the encryption impractical, without having to add another layer of encryption above it. Curious if others feel this is a reasonable assumption?