Closed
Description
Blake2s (see: https://blake2.net/) looks more efficient - constraint-wise - than sha256. Hence, we should consider switching to this hash function when possible to diminish the number of multiplicative gates in the arithmetic circuit.
Related discussion: zcash/zcash#2630