Wasn't BLAKE2s recommended on the Noise mailing list, being faster for low volume messages, even on 64-bit?