I just want to use my zTex 1.15x for coins that try to evolve crypto currencies as diversification and hedge.
You are welcome to get Xilinx ISE and build it yourself based on Krambles FPGA project getting a good high fmax design to bitstream is no easy task and the 14 rounds used by cryptonote for Blake will make it slower and harder to do as it will be larger and use more power and resources on chip!
also note that 14 rounds will never be as good hash/watt as using 8 and for a PoW system I see no advantage to using more than 8 as it gives minimum of 2
200 best attack and 2
256 for brute force
*14 round is also the final submission of the Blake-256 algo to NIST for SHA-3 which it did not win because they wanted the sponge function, why the increase in rounds for Blake-256 was due to others saying Blake-256 was too fast but in a PoW system we want fast and less resources hence why I reduced it from the 10 rounds(round 1 Blake-256 SHA-3 candidate code was faster/better than final imho) to 8 rounds while keeping same security for brute force as SHA-256D (2
255) vs 8 round Blake-256 (2
256)
here is the independent proof of the security of 8 Round Blake-256 by one of the best academic teams in the world to show that I did not just make this up it is provable with academic papers about if you care to read them
*Other result and papers were about earlier than this but not specifically about 8 round Blake-256 I had estimated a figure of 2
192 but it seems I was a little too pessimistic and actually 8 round Blake-256 is better than I first thought
a Boomarang attack is not so relevant for a PoW based wallet where we are doing a brute force and for brute force Blake-256 is better than SHA-256D as that is a double SHA-256 and thus has an extra collision, to get length extension resistance with the Merkle–Damgård construction method Bitcoin used a double sha-256 but Blake-256 uses the HAIFA construction method that does not need a double hash to have same resistance to a length extension attack
also remember that the algo runs in wallet on CPU for regular function of receiving and checking of blocks, so faster and more efficient is better hence why Blake-256 was used for more than PoW in the Blake 256 Family of coin wallets then on top of the already extremely efficient system you should take into account the extra efficiency gained by merge mining 6 coins+
*yes the pool server can run more wallets due to the efficiency gained on the same server hardware/specification
I personally think on a technical point view its hard to beat as 7 round Blake-256 is no good and only 2-3 other algos that are also academically provably secure and faster than 8 round Blake-256 are avalible and no one is using them as far as I know