Under the hood OpenSSL is a very solid, high performance library that implements crypto primitives. When it is all said and done there is not a lot to crypto p

Under the hood OpenSSL is a very solid, high performance library that implements crypto primitives. When it is all said and done there is not a lot to crypto primitives as they are all very well defined with straight forward interfaces. Nonetheless, you see lots alternatives to OpenSSL, most of which have headline banners like "easy to use correctly". My guess is the EVP API is the major reason OpenSSL is so difficult to use. Yes, it is poorly documented, but I suspect documentation alone can't save a difficult API. It doesn't have to be that way. Rust is a good example of a language that like Java and OpenSSL is built on lots of abstractions, but nonetheless the doco is a joy to read and follow. A lot of thought has goes into most Rust API's, so that good doco is a product of good API design combined with good document writing. It will be a challenge to put lipstick on this particular pig - but on behalf of all OpenSSL users out there, I wish you luck.