On Apr 7, 2017, at 2:17 PM, Oleg Andreev <oleganza at gmail.com> wrote: > For instance, NaCl API accepts 64-byte secret Not really. What appears to be a 64 byte secret key is actually a 32-byte secret key concatenated with the corresponding 32-byte public key. rg