One concern I have with Argon2 is that it uses BLAKE internally.  This is understandable, since BLAKE was developed by one of the conveners of the Password Hashing Competition, but it seems to me that using SHA3 internally would be a better choice, in order to leverage the industry-wide investments in development &amp; testing which we&#x27;re likely to see.<p>Assuming that it&#x27;s well-designed, Argon2&#x27;s structure shouldn&#x27;t rely on BLAKE.