Have likewise needed these features on occasion. While it’s certainly worth a look around, WASM seems good for this use case:
While reusing a proven provider like sodium would also be attractive:
If we’re going to be doing anything at scale, seems like these would directions to look down. If we were doing more hashing stuff in the build side of things on node, i’d lean towards the sodium one, unless it’s not particularly well packaged (e.g. downloads binary blobs at install- or run- 
time)