Solving for faster SHA-1 collision detection

What happened

SHA-1 with collision detection doesn't have to be so slow. How a code generator that moves the checks to SIMD can narrow the gap to plain SHA-1 to ~20–30%.

Summary assembled by rule from the sources below

Sources