2025.03.25 12:31:17 (Mastodon 114223079563406853, Twitter 1904511421615890843) from Daniel J. Bernstein:
Graph of what papers report for costs of attacks against ChaCha6 and ChaCha7. ChaCha8 is untouched so far, but, as always, my recommendation is to use 20 rounds except when speed constraints force usage of 12 or 8. Graph comes from my latest McEliece talk: https://cr.yp.to/talks.html#2025.03.24
