Blake2b has a lightning fast compression function with more-than-overkill security even against quantum attacks. It seems to be based on ChaCha, but with 64-bit words and different rotation constants.
Is it possible to use this compression function with feed-forward as a stream cipher? If not, would a different variation on ChaCha with a 64-bit word size be secure?
