http://gcc.gnu.org/bugzilla/show_bug.cgi?id=17838
--- Comment #13 from Eric Botcazou <ebotcazou at gcc dot gnu.org> 2013-04-21 09:59:26 UTC --- > In this case the code is computationally intensive. It doesn't make sense to > compile with '-Os' for cryptographic algorithms. Huh? Of course it makes sense to compile with -Os if you have specific code size constraints and it's quite easy to have code compiled at -O3 running slower than compiled at -O2/-Os on (very) embedded CPUs.