I'd accept JS answers as valid if they also count the SLOCs required to implement all cryptographic primitives, not throw in a binding to libsodium or something and call it a day.