If you like libtomcrypt better, then I'd contact the author and see if you can get him to clarify that * derivative works * redistribution in source and binary form both of the original and derivatives are OK then I think it should be fine. If you like the other library then it's probably good as is.