[GoblinSlayer]

It should be noted that chacha20 has insanely comfortable security margin. With a more accurate estimate chacha8 has a security margin similar to that of AES, and chacha20 has 2.5 times more rounds, see if it's worth the cost.

[wmf]

Unfortunately almost no one can use ChaCha8 since the standards all call for ChaCha20.