I was hopping this would be about larger fields. For zero-knowledge proofs we need to handle 255-bit field and operations are quite slow due to that (https://o1-labs.github.io/proof-systems/specs/pasta.html#pal...)