If I remember correctly, sub used to be slower than xor on some ancient architectures.