Small helpers for common crypto needs.

Envelope encryption - envelope contains secret content encrypted with NaCl secretbox symmetric key ("DEK"), and that key is separately encrypted for each RSA public key recipient ("KEK").

Message Authentication Code - to make sure a message is not tampered with while in-transit by a malicious party.

Use public key crypto to encrypt a data stream in a way, that the encrypting party can not necessarily decrypt the same data (unless she possesses the private key as well).

Generate random passwords.

API that tries to make it safe(r) to store user's passwords.