That it uses a prime field is a bit awkward, as it requires repacking bytes to and from the field. Leopard (https://github.com/catid/leopard https://github.com

That it uses a prime field is a bit awkward, as it requires repacking bytes to and from the field. Leopard (https://github.com/catid/leopard https://github.com/catid/leopard) is similarly fast but constructed over GF(2^16) so it doesn't need any repacking. OTOH, that also limits it to 2^16 packets per codeword.