I don’t understand most of this, but it sounds great:

@jimpo_potamus You should add a benchmark of BLAKE3 here:

@jimpo_potamus BLAKE3 is currently used in: * BitVM () * Stwo () * and is a candidate for Ethereum:

@jimpo_potamus Not to mention a lot of other uses outside of ZKP's, incl Nym, Farcaster, Solana, Decred, and Chia, and outside of cryptocurrency/blockchain, incl LLVM, Cargo, OpenZFS, Linux kernel, and Nix, etc. etc. etc.

@jimpo_potamus I think it's natural assumption that there must be a tradeoff, so the fact that BLAKE3 is a bizmillion times more efficient than SHA3/Keccak suggests that it is less secure, but I think that's wrong in this case -- BLAKE3 is a lot more efficient and also just as secure as SHA3.

@jimpo_potamus (And BLAKE3 is arguably *more* secure than SHA-256. Arguments available upon request. :-))

@jimpo_potamus P.S. And BLAKE3 is used in Matter Labs's fast new zkVM:

@jimpo_potamus And Aztec’s new Barretenberg prover: (HT @veorq)