Hey, I used to work with their CTO! Hopefully he'll respond himself, but in case he doesn't:
> (384-bit prime) - Why not just use X448 since that's now an Internet Standard?
I believe they started working before X448 was standardized.
> It also uses Fortuna for IVs, etc. instead of directly /dev/urandom (or window.crypto in JS land). Userspace CSPRNGs are a devastatingly stupid idea.
IE doesn't have great support for window.crypto. If you're building an enterprise product, you probably care about this.
> FUD. Where you host the data shouldn't matter, because the server should never be given access to your plaintext.
I believe their point here was that most cloud services today DO have access to your plaintext. It's not FUD if it's true =).
I know I'm a bit biased, but these guys are pretty smart, and I'd trust them.
> (384-bit prime) - Why not just use X448 since that's now an Internet Standard?
I believe they started working before X448 was standardized.
> It also uses Fortuna for IVs, etc. instead of directly /dev/urandom (or window.crypto in JS land). Userspace CSPRNGs are a devastatingly stupid idea.
IE doesn't have great support for window.crypto. If you're building an enterprise product, you probably care about this.
> FUD. Where you host the data shouldn't matter, because the server should never be given access to your plaintext.
I believe their point here was that most cloud services today DO have access to your plaintext. It's not FUD if it's true =).
I know I'm a bit biased, but these guys are pretty smart, and I'd trust them.