box abstraction for symmetric encryption
import NaCl 20110221
add prebuilt NaCl for Android
switch to AES-GCM(k0, XSalsa20Poly1305(k1, ...))
replace RAND_bytes() with NaCl's randombytes()