EDIT: Actually, the parts about OPAQUE are no longer relevant because they changed the protocol before the RFC was final to not need encryption, but that was just an example of where you'd make this sort of trade-off decision, so the rest of the article is still relevant.
Comments
I wrote a deep dive into this in 2020, but not much has changed since then.
https://soatok.blog/2020/07/12/comparison-of-symmetric-encry...
EDIT: Actually, the parts about OPAQUE are no longer relevant because they changed the protocol before the RFC was final to not need encryption, but that was just an example of where you'd make this sort of trade-off decision, so the rest of the article is still relevant.
Oh hey, the AEGIS poll looks like it's due today [1].
Committing, better performance, random nonces - let's go.
[1] https://datatracker.ietf.org/doc/draft-irtf-cfrg-aegis-aead
Oh sweet.