3 ms·

This would make sense if only it wasn't faster to run AES_GCM or some other AEAD, than whatever they did there.