I'm investigating Certicom's API because they are "free" with the Blackberry implementations, and have come to realize that I have several alternatives for implementing crypto such as BouncyCastle, and others.

I like the idea of using the same API across my product set, rather than to use Certicom for Blackberry, .NET for the server-side, and BouncyCastle in the Java clients.

What should I take into consideration when I access Certicom and their ECC technology? 

What claims are real versus marketing FUD? Since this is not my area of expertise, I think it will take me significantly more time to separate the wheat from the chaff.