We built something very similar a couple years ago except all encryption/decryption is done broswer side, so no keys are ever sent through our server. Also, it uses actual tweets as opposed to DM's.
You can see an example here:
Enter "yickster", then passphrase "hackernews"