Not to pile on (the other response is dead on), but you also seem to be assuming that libsodium is magic crypto dust, offering strong security anywhere you spri

Not to pile on (the other response is dead on), but you also seem to be assuming that libsodium is magic crypto dust, offering strong security anywhere you sprinkle it. It isn't. To be sure, libsodium is shiny and nifty and wonderful, but the root cause of a large number of crypto insecurities is in key management. A bunch of others can be regarded as subtle mistakes in using an otherwise solid algorithm. Assuming that using a trusted implementation of a trusted algorithm means your crypto is solid is roughly like saying, "my car as airbags, so it is safe."