Use a ring buffer in the chunker (avoid memmove() call)
Switch to blake2b when it lands in libressl
