3 ms·

Surely the correct answer is "just use keyczar"? At least 99% of the time.

• tptacek 13y ago
  Most practitioners would recommend Nacl now.
  • jiggy2011 13y ago
    Nacl or libsodium?
    • hendzen 13y ago
      The primitives are the same, but libsodium is more portable (but slower).
• ReidZB 13y ago
  Keyczar --- and other cryptographic libraries, mostly --- don't solve the issue of protocol design. They do let you choose the primitive you want, but it's still up to you to pick a mode of operation, make sure you use authentication (AEAD mode / MAC), initialize IVs/nonces/counters correctly, etc. NaCl is very much a step in the right direction, but it's not an end-all solution either. Key management alone is a huge issue, for example, but virtually no library helps you out there beyond providing a basic toolkit. Of course, key management is very much in the realm of policy, so that's to be expected.