AES-NI
AES New Instructions: hardware AES acceleration introduced on Intel Westmere (2010) and AMD Bulldozer (2011) and now ubiquitous. Single-cycle round operations make AES-128-GCM run at multiple GB/s per CPU core and produce constant-time, side-channel-resistant code.