> BLAKE3, like BLAKE2s .. has .. a 128-bit security level. Skimming and interpreting the Too Much Crypto paper[1], the security target is strictly less than 12

> BLAKE3, like BLAKE2s .. has .. a 128-bit security level. Skimming and interpreting the Too Much Crypto paper[1], the security target is strictly less than 128-bit security. If it maintained 128-bit security, it would be considered too many rounds. [1] https://news.ycombinator.com/item?id=21917505 https://news.ycombinator.com/item?id=21917505