use crypto_box_keypair for key generation