It is hard to imagine that a few random bytes makes a measurable difference, but I suppose it’s possible. You’ve checked, for example, that you’re using the same cipher suite in both cases? And what’s a transaction – connect, then shutdown with no application-level traffic to get in the way?
-- Principal Security Engineer Akamai Technologies, Cambridge, MA IM: rs...@jabber.me<mailto:rs...@jabber.me>; Twitter: RichSalz