Earlier quoted context omitted.
WebCrypto is a potluck of popular cryptography standards, chosen by committee. What you want instead is a library that carefully selects primitives with an emphasis on: 1. Security 2. Performance 3. Ease of use You want a high-level API, like I'm building for PHP 7.1, not a low-level API, like openssl, mcrypt, WebCrypto, etc.
Google's NaCL (i.e. NativeClient, not Libsodium-- awful overlap in terminology there) + Crypto_box + PPAPI seems to be really easy to implement as well as really secure, but Mozilla wants nothing to do with NaCL (again, the Google Native Client for Chrome/Chromium - not the DJB lib). Edit: and that's what I get for skipping over half the posts in this thread. You specifically mentioned crypto_box/libsodium. No surpri…
Heh, thank you. :)
> Speaking of which, Thomas, in a few weeks if you have some spare time I'd love for you to look at what hopefully isn't a travesty of a product.
If he doesn't, feel free to ping me. ;)