We also wanted to make a simpler and safer option (and in our eyes, more pleasant to look at) to existing password managers.
1Password also uses standard encryption, from the link [1]:
> We use Encrypt-then-MAC authenticated encryption everywhere we use encryption. The MAC is HMAC-SHA256 and encryption is AES-CBC using 256-bit keys. Key derivation is uses PBKDF2-HMAC-SHA512. More detail about these choices will be presented in the relevant sections on key derivation and item encryption.
> In this document we will refer to “blocks of data”. Unless otherwise stated, blocks are the length of AES blocks, 128 bits (16 bytes).
Edit: apparently Github lists [2] four libraries for reading OPVault, one each in Python, Haskell, Go and Ruby
I was replying to address two of the three points that these people invested 6 months to build YAPPM (Yet Another Proprietary Password Manager).
As is typical of developers they've solved a problem that _probably_ didn't need to be solved. With a more product orientated mindset a business plan, and some market research probably would have preceded six months of engineering effort.
The "more beautiful" is subjective, I'd argue that having only one platform targeted makes it much easier to build an app in-keeping with one platforms HCI guidelines. I happen to use a Mac, an Android phone, and a Linux desktop, thanks to WINE I can use 1Password everywhere, and knowing that the format is public, and documented, and there are 3rd party implementations I don't need to worry about AgileBits ceasing to exist.
I'm left seeing some developers making the same mistakes that I have made when building a product before finding out if the world really needs a _subtly_ different app to solve an already solved problem.
https://twitter.com/pfandrade_/status/730681656496001024
I think the developer invested nearly 6 years into it, and the comment about 6 months was time elapsed since initial release and doing the Show HN. It sounds like it was a spare time project for an indie developer.
I'd argue that the implementation (or library) matters just as much as the standard (OpenPGP) when considering trust.