[Babel-users] [babel] HMAC and MTI [was: rather than ripemd160...]

[Markus Stenberg]

On 26 Nov 2018, at 15.46, Juliusz Chroboczek <jch at irif.fr> wrote:
>> I'm not sure if we *can* make [blake2s] MTI in the spec as well (does it
>> need to be defined by a standards track RFC for us to do that?), but if
>> we can, I think we should seriously consider it...
> Opinions?

I like Blake (family of) hash functions so on that front +1; however, no idea how bureaucracy works.

Dave had a good point as well though, comparing -2s and -2b performance on some set of hardware (e.g. arm, mips, intel) might be in order before picking between the two. I am not convinced -2s is the way _forward_. Even now most of hardware in my home is already 64bit ..

-Markus