I am always on the look out for privacy enhancing technologies. I stumbled upon the service from unseen.is. I had a look at their site (specifically here) and even though I lack knowledge there are a few early warning signs:
a former security contractor told us "if it's publicly available, it's cracked"
I think this is untrue?
extremely strong but not widely available encryption
I thought extremely strong = widely used/available?
We've use only super strong NTRU encryption for public key exchange that is believed to be resistant to even quantum computing attacks
Quantum computing doesn't even exist in any (realistically) applicable way, so I think this a bold statement?
I contacted the service asking about their encryption algorithm, how they exchange keys, if they have cryptographers on their team and got this response:
For the chat we use NTRU for the key and xAES for the message, 4096 bit key. For email we are using PGP at the moment 2048 bit or 4096 bit. The email will get upgraded to the same encryption as the chat at some point. Probably this summer.
I also found out that NTRU is in fact a known standard and has a wikipedia article although I am suspicious of the concept.
Simply put my question is this: would this service and their claims fall under "have no clue" or is it my lack of knowledge and could this be a very decent, functional service?
we add an advanced symmetrical encryption which is very easy to use with keys 16x longer than those found in AEA256, an industry standard. According to our engineers, this will take 23840 times longer to crack than aes256, which is commonly known as "military grade" encryption.