> The difference between OpenSSL and rustls appears to be thanks to an extra copy in the main data-path in OpenSSL.
> It appears OpenSSL recalculates and then discards the local public key when processing the server’s key share extension. This likely explains the larger performance deficit in this test.
in it. So I doubt that it's the result of differences in the primitives.