I suppose that for a prototype the default-mandatory ciphersuite is fine. But I would hold off on finalizing the NIP until we have custom ciphersuite. Otherwise every Nostr client out there starts pulling in random dependencies from all over the internet.

... (well that might happen anyway, because you can't stop people as soon as a prototype works)