Cryptocat uses client-side JavaScript to implement AES-256 for message encryption, elliptic curve Diffie–Hellman for key agreement, Whirlpool for key derivation and fingerprint generation (used for authentication), and HMAC-WHIRLPOOL for message integrity verification. Since Cryptocat generates new key pairs for every chat, it implements a form of perfect forward secrecy. Cryptocat also provides a mobile website for use on portable devices such as smartphones, and may be used in conjunction with Tor in order to anonymize client connection details from the server side. Cryptocat also offers encrypted file sharing and private messaging. The project also plans to create an embedded version for use with Raspberry Pi devices.
Je pa avtor programa že naletel na težave, ki so jih opisali danes na Slo-Techu.