This came up again recently when I added SHA-3 support to 'cksum'. I think the conclusion was that OpenSSL was still faster. All of Assaf's points are good too, though.