3 ms·

Or integrity checking for non-authenticated encryption modes (wouldn't want file encryption or https to be slow).