News for hackers. Stuff that matters.
Re:Maybe Skip SHA-3 by remcob on Wednesday May 31, 2017 @04:09PM (#14455512)
Yes, I'm much more rooting for the Sponge construction than Keccak/SHA3 specifically. I'd like to see any permutation function get broad hardware support.

> I think there's wide agreement that SHA-3 is too conservative.

As you probably know, SHA3 originally had 18 rounds, but this was raised to 24 during the competition. This of course hurt performance. In some early proposals for a stream cipher, the authors reduced the rounds to 12 to get better performance.

Re:Maybe Skip SHA-3 by baby on Wednesday May 31, 2017 @04:39PM (#14455724)
They split the rounds in half (down to 12 rounds) for Kangaroo Twelve: https://cryptologie.net/article/393/kangarootwelve/