Closed burdges closed 5 years ago
I've added a warning on the bytes method. We'll add benchmarks eventually and then compare with SimpleTranscript<Shake128>
and eventually SimpleTranscript<Blake2x>
if https://github.com/RustCrypto/hashes/issues/83 happens.
Aside from either using Blake2x directly or doing a ChaCha variant of STROBE. We could give Keccak STROBE a fast mode, likely along the lines of KangarooTwelve. See https://github.com/debris/tiny-keccak/pull/41
I'm going to close this since the ship sailed and we're using merlin now. :)
We almost always use merlin for hashing, but merlin is not optimized for large amounts of data, thus making
SigningTranscript::bytes
slow. We should look into blake2x and/or develop a chacha based strobe variant and/or encourage using theSigningTranscript::hash256
method instead. See https://github.com/paritytech/substrate/pull/2415