Hey, I used to work with their CTO!  Hopefully he&#x27;ll respond himself, but in case he doesn&#x27;t:<p>&gt; (384-bit prime) - Why not just use X448 since that&#x27;s now an Internet Standard?<p>I believe they started working before X448 was standardized.<p>&gt; It also uses Fortuna for IVs, etc. instead of directly &#x2F;dev&#x2F;urandom (or window.crypto in JS land). Userspace CSPRNGs are a devastatingly stupid idea.<p>IE doesn&#x27;t have great support for window.crypto.  If you&#x27;re building an enterprise product, you probably care about this.<p>&gt; FUD. Where you host the data shouldn&#x27;t matter, because the server should never be given access to your plaintext.<p>I believe their point here was that most cloud services today DO have access to your plaintext.  It&#x27;s not FUD if it&#x27;s true =).<p>I know I&#x27;m a bit biased, but these guys are pretty smart, and I&#x27;d trust them.