https://gcc.gnu.org/bugzilla/show_bug.cgi?id=111774
--- Comment #3 from cpu <daniel at binaryparadox dot net> --- > What happens if you enable the above for GCC too? That appears to have helped, but not closed the gap: ``` Did 39600 Ed25519 key generation operations in 1001716us (39532.2 ops/sec) Did 41000 Ed25519 signing operations in 1006641us (40729.5 ops/sec) Did 32000 Ed25519 verify operations in 1020079us (31370.1 ops/sec) Did 43000 Curve25519 base-point multiplication operations in 1023075us (42030.2 ops/sec) Did 39000 Curve25519 arbitrary point multiplication operations in 1008147us (38684.8 ops/sec) ```