Hacker News new | ask | show | jobs
by floody-berry 4135 days ago
When Rijndael was chosen as AES, it was ~3 years old and was broken for 6-7 rounds out of 10 with 128 bit keys, and 7-8 rounds out of 14 with 256 bit keys. Chacha20 is 7 years old now and is broken for 7 rounds out of 20, with the attacks on BLAKE/BLAKE2 holding up that margin. You should be very comfortable with Chacha20!