&gt; GPG for data at rest. TLS for data in motion.
&gt; You can also use Guttman&#x27;s cryptlib, which has a sane API. Or Google Keyczar. They both have really simple interfaces, and they try to make it hard to do the wrong thing.
&gt; © Copyright Matasano Security 2009.<p>Assuming that something has <i>probably</i> changed in cryptoland in the past 6 years -- what are the current recommendations for simple-api does-the-right-thing-by-default crypto libraries?