I installed the lastest beta offered for download (that I downloaded anyway) to test some RDF stuff to see if anything the editions I maintain might need to be updated, but to figure out how the hash function worked, I looked at the code and noticed this line:var hash = PasswordMaker_SHA256.rstr_sha256(clearTextMasterPassword, salt);
Yea, it's fine by itself, but look at the prototype of the function it calls: rstr_sha256 : function(s)
That salt is just wasting space it seems. So either remove the salt stuff, or use HMAC (and try to use the any_hmac_sha256: function(k, d, e) instead (Actually, it would reduce this one function to one line, which could remove the function for now.)
[edit] There's a possible localiztion bug as well. I'll look into more later, but the "Quit/Exit" option is missing it's label, just the keyboard shortcut is there. Advance options I believe.