[EdSchouten]

Relatedly, what's the advantage of that secretbox package over calling https://pkg.go.dev/crypto/cipher#NewGCM ?

[yencabulator]

NaCl predates GCM by some 15 months. But that's an old concern, both are pretty old by now.

NaCl tends to be faster on hardware without AES acceleration.

Go's AES/GCM implementation is not constant time unless the hardware has AES acceleration.