JWT cache hides performance problems on dependencies

[steve-chavez]

The JWT cache #4084 brought great performance gains but looks like that's due to the crypton library (dependency of jose-jwt) not using hardware acceleration.

Switching to the botan project (which uses https://github.com/randombit/botan) would be the ideal solution although it's WIP.

Some references on the progress:

• https://discourse.haskell.org/t/botan-bindings-devlog/6855/211
• https://haskell-cryptography.org/blog/botan-first-milestone/

[steve-chavez]

Just looked at crypton and it does have more optimizations now. But looking at its commit history, they look heavily vibe-coded, which is concerning for an encryption library.

[taimoorzaeem]

But looking at its commit history, they look heavily vibe-coded, which is concerning for an encryption library.

That's concerning indeed.

botan looks promising, I would say that once it is ready and performant enough, we should switch to it.