Wondering if the authors heard of embedded disco[1] which uses X25519 and STROBE but with the SHA-3 permutation instead of gimli (and additionally uses Noise for encrypting and authenticating communications)

[1]: https://embeddeddisco.com/

PS: more info:

* video: https://www.youtube.com/watch?v=bTGLO4obxco

* paper: https://eprint.iacr.org/2019/180