x86 has hardware instructions for SHA-1 and SHA-256 (given that it is a hardware implementation of the two loops, it should also be possible to use it for SHA-224, as only the init vector is different for SHA-224). It would be nice to support those.