Unpacking s-boxes leaked timing, residual gain was 2 bytes. Ditched in favor of more throughput at that cost.