https://gcc.gnu.org/bugzilla/show_bug.cgi?id=108394
Tamar Christina <tnfchris at gcc dot gnu.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |tnfchris at gcc dot gnu.org --- Comment #1 from Tamar Christina <tnfchris at gcc dot gnu.org> --- we split +crypto into +aes+sha2 when upstreaming Armv8-4.a. sha3 includes sha2. This seems to be a testism, but +crypto+sha3 == +aes+sha3. It's curious that GCC 12 has this canonicalization though.