[gshayban]

What about libhydrogen's NORX construction with the Gimli permutation for AEAD and hashing? Seems like it checks a lot of boxes (from a layman's perspective.)

[baby]

indeed, there is also www.discocrypto.com