I saw Frank Denis (\`libsodium\` author) mention this on social media, stating:
\> Until the Keccak or Ascon permutations receive proper CPU acceleration, the AES round function remains the best option for building fast ciphers on common mobile, desktop, and server CPUs. HiAE is the latest approach to this.
is this a variation of AES? - I thought in the context of lack of AES-NI, \`chacha20-poly1305\` was fastest (and safest, typically) in software?