https://github.com/corretto/amazon-corretto-crypto-provider/ reports big performance improvements. It looks like it should be relatively straightforward to test whether this would matter for BagIt.