the crypto might be secure; i wouldn't be so sure about the rest of the code.