On 1/28/22, Sandy Harris <sandyinchina@xxxxxxxxx> wrote: > > Even in blake, > every iteration except the first applies the transform to > arbitrary somewhat random data. No. The compression function uses the IV always, to break potential symmetries. If you have a concrete idea, please just send a patch with good argumentation.