I've been playing around with DJB's NaCl (http://nacl.cr.yp.to/ http://nacl.cr.yp.to/) and have found it to be a very easy API to use (if a bit quirky to instal

I've been playing around with DJB's NaCl (http://nacl.cr.yp.to/ http://nacl.cr.yp.to/) and have found it to be a very easy API to use (if a bit quirky to install). Using this, I've come to the conclusion that the actual cryptography is trivial compared to key management ("trivial" in the meaning "it's done and proven, it should be easy to use," not in the "anybody can write their own encryption system").