https://gcc.gnu.org/bugzilla/show_bug.cgi?id=83651
--- Comment #2 from Arnd Bergmann <arnd at linaro dot org> ---
My kernel patch to use -Os got merged, but caused a regression, so I kept
experimenting with the libressl implementation. Apparently, turning off
-fcode-hoisting is a better way address PR83356, and the performance is the
same as with -Os: New numbers with libressl, same method as before:
-O2 -Os -O2 -fno-code-hoisting
gcc-6.3.1 16.7 16.7 -
gcc-7.0.1 17.5 16.0 16.0
gcc-7.1.1 17.5 16.0 16.0
gcc-7.2.1 17.5 16.0 16.0
gcc-8.0.0 16.8 15.5 15.5