Generally accepted algorithm for two-pass, misuse-resistant AEAD that is efficient in software I would like to know what the standard is for two-pass, nonce-misuse-resistant AEAD that is efficient in software.  Thus, AES-SIV is excluded; modes based on a stream cipher like ChaCha20 are preferred.
AES-SIV when done well can be very fast. If you have AES-NI then it is possible to get under a cycle per byte. It is not the original AES-SIV construction but rather this one based on GCM (I agree that the original AES-SIV is way too slow). I suggest also that you look at the Caesar candidates. In general, there is no "standard" yet here.