IMO, "don't implement your own crypto" is more about the bits that actually _do_ the encryption. Use a battle tested library for that (e.g. libsodium). Wiring i

IMO, "don't implement your own crypto" is more about the bits that actually _do_ the encryption. Use a battle tested library for that (e.g. libsodium). Wiring it up is a little different. You can misuse a library, but it's a lot easier for some random person to point out how you're misusing a library than it is for them to e.g. prove that you reimplemented some KDF correctly.