Mathematical AES: The slowest (but constant-time) AES implementation you can find. Here, SBOX takes 80 nanoseconds.
Constantine: modular, high-performance, zero-dependency cryptography stack for verifiable computation, proof systems and blockchain protocols.