New differential-linear attack on ChaCha, with bit puncturing and key guessing shaving time off 7 and 7.5-round key recovery.