Aug 16, 2026

Benchmarked against the Core implementation. It doesn't vectorize, and in a simple scalar implementation, it's a little faster - though I still have to optimize Poly1305, which should eliminate that. Our network layer over it should also be faster given less allocation and copy of these big (e.g. block) buffers. But with SIMD we are much faster. After normalizing the implementation for 128/256/512 vectorization on Intel/AMD and Arm, to match our hashing templates design, we are now significantly faster than Core across the hardware spectrum, and the above CPU impact should be marginal. More optimizations and benchmarks pending.