SHA-1 with collision detection doesn't have to be so slow. How a code generator that moves the checks to SIMD can narrow the gap to plain SHA-1 to ~20–30%.
The gearhash crate has gained a NEON backend for improved performance. How a direct port started out slower than scalar, and the dependency-chain work that fixed it.