3 ms·
If you are using the reduced rounds of Blake3, seems like you might as well also go to XChaCha12 or XChaCha8?
by searealist 5y ago
If you are using the reduced rounds of Blake3, seems like you might as well also go to XChaCha12 or XChaCha8?
- loeg 5y agoI.e., as one of the Blake3 authors calls for in Too Much Crypto (2019)[1] (8-round ChaCha in particular). There is a 2021 update in the Conclusion section: > Edit (May 24, 2021): 17 months after the original publication of this paper, its most concrete impact seems to be the adoption of ChaCha8 in a number of projects, notably thanks to its addition to the chacha20 crate of the RustCrypto project. We are not aware of new research results contradicting the paper’s claims, nor of results that would justify (from our point of view) a revision of the proposed reduced-round versions in §§5.3. [1]: https://eprint.iacr.org/2019/1492.pdf https://eprint.iacr.org/2019/1492.pdf (PDF)