When I first learned of NaCL/libsodium I was very interested in a new API but.. It seems to me like if you go with anything along these lines you have very litt

When I first learned of NaCL/libsodium I was very interested in a new API but.. It seems to me like if you go with anything along these lines you have very little chance of ever supporting hardware protected keys (smartcards, hsms, etc) and, quite frankly, I'm not sure any data should be stored on a normal computer or mobile phone that you wouldn't publish in a blog, so having a software key is madness, IMO.