From <a href="https:&#x2F;&#x2F;www.balboa.io&#x2F;security.html" rel="nofollow">https:&#x2F;&#x2F;www.balboa.io&#x2F;security.html</a>:<p>&quot;Skein-1024-CTR, with Skein-1024 as an HMAC in an encrypt-then-mac scheme&quot;<p>I guess Skein-CTR is based on &quot;Skein as a Stream Cipher&quot; section from the spec.<p><a href="https:&#x2F;&#x2F;github.com&#x2F;pkcsecurity&#x2F;trabant&#x2F;blob&#x2F;master&#x2F;pkc_skein.c#L52" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;pkcsecurity&#x2F;trabant&#x2F;blob&#x2F;master&#x2F;pkc_skein...</a><p>From homepage: &quot;We use 1024-bit symmetric key encryption, a stronger level of encryption than most industry standards.&quot;<p>I guess the reason for using Skein is so that they can use this bullshit marketing :)