If you are developing this inside the US, be sure to pay careful attention to export laws. Some (most?) forms of good encryption need an export license if they are built into any product, expecially so if they allow the user to take some aribtary data and encrypt it.

Andy