Iddo: blake3-224 or standard blake3-256 or blake2-224, note that blake3 is faster in large part because of reduced rounds (other than that it has better parallelism), we won't make final decision yet, the only thing you might care about for now is the output size, it'd be either 28 bytes or 32 bytes, btw we created ready to use blake3-224 private library.
Iddo: blake3-224 or standard blake3-256 or blake2-224, note that blake3 is faster in large part because of reduced rounds (other than that it has better parallelism), we won't make final decision yet, the only thing you might care about for now is the output size, it'd be either 28 bytes or 32 bytes, btw we created ready to use blake3-224 private library.