Libsodium is actually really small
It also has a lot of eyes on it and was reviewed by people whose job is to spot these sort of issues
It also has a lot of eyes on it and was reviewed by people whose job is to spot these sort of issues
Libsodium is also extremely robust. The only crypto project I’ve seen that is as footgunless is google’s tink, and that isn’t available for a JS environment.
What’s great about libsodium is that it’s a single code base that works everywhere. RSA libs I’ve used have subtle differences when it comes to loading keys in different formats and also incompatibilities due to dropping leasing zero bytes for instance. Compared to that, libsodium was a breeze that just worked.