recommend BLAKE3 instead of BLAKE2

[zookoatshieldedlabs]

Reasons:

• BLAKE3 has been out for 5 years now.
• No further cryptanalytic results have come out indicating that it might not be secure (nor for BLAKE2, nor BLAKE, nor ChaCha20, nor Salsa20).
• BLAKE3 has a major, qualitative efficiency improvement, which is the Merkle Tree structure, allowing (but not requiring) any amount of parallelism.
• BLAKE3 is already extensively adopted in many different projects in many different industries/areas/niches.
• BLAKE3 is currently being more actively maintained, as in patches are being accepted by the chief maintainer, Jack "@oconnor663" O'Connor. https://github.com/BLAKE3-team/BLAKE3/commits/master/

P.S. Hi, Tony! :-)

[zookoatshieldedlabs]

P.S. You might be interested to know that I found this repo from https://github.com/0xPolygonHermez/zisk-patch-hashes

[tarcieri]

I'm fine with this, although it should probably link to the BLAKE3 repository since it's not in-tree.

Curious what @newpavlov thinks.

[newpavlov]

I agree that we should link the BLAKE3 repo. I am fine with recommending BLAKE3 instead of BLAKE2, especially considering that our current implementation is not great.