I don&#x27;t know if I would characterize NaCl as &quot;enormous&quot;. TweetNaCl is literally two files. Libsodium has a bigger footprint, but it also seems to have bindings for pretty much every language. I would think it&#x27;s pretty easy to integrate.<p>I definitely do not think the proliferation of unvetted, anonymous crypto libraries is a good thing. How many people have the expertise to write this kind of thing? How many have the expertise to evaluate its quality?<p>For example, the documentation for the linked library says: &quot;we&#x27;ve also added integrity checking in the form of a SHA 256 hash.&quot; This is a huge red flag: hashes provide integrity, but not authenticity, which is really what you want here. But then you go and look at the source code and find that they are actually using HMAC-SHA256, which does provide authenticity. So the documentation is not an accurate description of what&#x27;s going on, and you need to go and look at the source to find out that it really is okay (in this particular aspect, though it doesn&#x27;t inspire confidence for the future).<p>My point is not to say that this particular library is terrible or anything. Just that we have limited resources, and we&#x27;re better off consolidating to a very small number of solutions designed, written, and validated by experts.