n
я тем временем нашел цитату от авторов конкурса на SHA-3 "We preferred to be conservative about security, and in some cases did not select algorithms with exceptional performance, largely because something about them made us 'nervous,' even though we knew of no clear attack against the full algorithm"
