Hacker News new | ask | show | jobs
by Everlag 4047 days ago
'We currently use the AES encryption algorithm combined with strong password hashing to ensure your data is secure as possible.'

They don't mention cipher mode, hash algorithm, hash tuning parameters, or if they are even using authentication of some form alongside the encryption.

Complete transparency in terms of crypto ensures you aren't holding a steaming pile of shit if the service becomes popular and it is found that you were using ECB and SHA1.