I agree about the key-derivation (just use the PBKDF built into .NET dammit), but I&#x27;ve checked out the code, and it looks sound. It uses standard Windows crypto libs when running on &gt;=Vista.<p>As to the auth&#x27;d encryption: they do that above version 2.2 <a href="http:&#x2F;&#x2F;keepass.info&#x2F;help&#x2F;kb&#x2F;sec_issues.html" rel="nofollow">http:&#x2F;&#x2F;keepass.info&#x2F;help&#x2F;kb&#x2F;sec_issues.html</a>