SHA-1 with collision detection doesn't have to be so slow. How a code generator that moves the checks to SIMD can narrow the gap to plain SHA-1 to ~20–30%.