redcannon218

TL;DR: Programming agents need strong typing and compiler-enforced correctness to get feedback.

The claims about privacy are, at best, dubious.

While it's true that there are less opportunities to track you through leaky / malicious apps, "dumbphones" remain, well, phones, with data retention laws in almost all countries in the world (and the subsequent leaks / hacks, see the recent Salt typhoon events for a good example) plus extra vulnerabilities due to poorly-developed Operating Systems.

My benchmarks are not public, but on AMD EPYC processors ChaCha12 (5 GB / s) is faster than hardware-accelerated AES-256-GCM (3.5 GB / s).

Unfortunately, this is comparing apples to oranges because AES-256-GCM is authenticated, so you will need a MAC with ChaCha12 (usually Poly1305) which finally makes ChaCha12 in AEAD mode slower than AES-256-GCM.

But the real question is: What is fast enough?

I believe that between 1 and 2 GB / s per core for an AEAD is fast enough as I/O will be your bottleneck way before that.

This is why I will always favor a ChaCha20/ChaCha12-based AEAD over AES and its many footguns.

I need to hash something, one way or another, in virtually 100% of my projects. Where is SHA-256 in the standard library?

But Go has proven that the ecosystem is way more important than the language.

It's time to shift priorities.

Please see my edit

Unfortunately Rust is making the exact same mistake.

Edit: It focuses too much on the language instead of the ecosystem.