Comment by stouset

3 hours ago

256-bit ECC on the other hand is frequently performed by 4-wide 64-bit operations with a little extra accounting.

and the more recent (post-quantum) lattice-based stuff can get away with ~16 bit arithmetic (it's vectors of ~512-1024 dimension, but the operations are SIMD-friendly)