[JoshTriplett]

Look for reviews by reputable security experts. Look for use of a standard cryptographic library, preferably a high-level hard-to-get-it-wrong library, rather than hand-rolled cryptography.