Cookie Recipe Ingredients

[elipoultorak]

I'm trying to understand how AEAD works. In the cookie recipe, why don't you use crypto_secretbox? From what I understand, it does the job:

We want to store data in a cookie such that user cannot read nor alter its contents.

Thanks

[paragonie-scott]

why don't you use crypto_secretbox?

No reason. You totally could.

[elipoultorak]

All right, I started thinking that crypto_secretbox only provided encryption, not authentication. Obviously, I was wrong. Thanks for clarifying.