Why I have settled on XChaCha20+Blake3 as the AE suite of choice for my projects
https://mccarty.io/cryptography/2021/11/29/chacha20-blake3.html
·
This might get me some looks, but I have pretty solidly decided to go in on using XChaCha20+Blake3 as the AE of choice for my future open source work. There are numerous reasons for this decision, but it mainly comes down to the desire for defense in depth, and a deep dislike of fundamental properties of polynomial MACs.