Any plans to add protection against Specte?

[oblique]

One way is what OpenSSH does, which is encrypting sensitive information with a random prekey of 16kb size. Because of the size, attacker is unlikely to retrieve prekey with the current attacks.

OpenSSH commit: https://github.com/openbsd/src/commit/707316f931b35ef67f1390b2a00386bdd0863568

[stouset]

Yep. sodium_mshield was added to libsodium in a recent commit but has yet to be released. When it is, I'll incorporate it.