A Cryptography Engineer’s Perspective on Quantum Computing Timelines

Thanks for sharing. Btw, why do you recommend ChaCha over AES? Is there some inherent characteristic of ChaCha (or any other stream ciphers) that makes it better than AES (or any other block ciphers)? Afaik, only AES, has hardware level support, which allows encryption and decryption to be done way faster than similar algorithms. Edit) Just asked Gemini. It said that ChaCha is naturally more resistant to side channel attacks, and has a speed advantage over AES when running on unsupported hardware. please correct if I’m wrong