On: Reasons to Prefer Blake3 over Sha256

[wmf]

I'm assuming that both SHA256 and Blake3 are using integer SIMD.

[api → wmf]

In some CPUs that may be true, but in many there are dedicated SHA instructions that amount to a SHA ASIC in the CPU.

AES units are even more common. Most non-tiny CPUs have them these days.

[wmf → api]

The AES and SHA instructions are part of the vector units so their energy will be similar to other integer SIMD instructions. The overhead of issuing the instruction is higher than the work that it does so the details don't matter.