diff --git a/internal/stupidgcm/prefer.go b/internal/stupidgcm/prefer.go
index a08d154..c067d09 100644
--- a/internal/stupidgcm/prefer.go
+++ b/internal/stupidgcm/prefer.go
@@ -6,11 +6,11 @@ import (
 
 // PreferOpenSSL tells us if OpenSSL is faster than Go GCM on this machine.
 //
-// Go GCM is only faster if the CPU:
+// Go GCM is only faster if the CPU either:
 //
-// 1) Is X86
-// 2) Has AES instructions
-// 3) Go is v1.6 or higher
+// 1) Is X86_64 && has AES instructions && Go is v1.6  or higher
+// 2) Is ARM64  && has AES instructions && Go is v1.11 or higher
+//    (commit https://github.com/golang/go/commit/4f1f503373cda7160392be94e3849b0c9b9ebbda)
 //
 // See https://github.com/rfjakob/gocryptfs/wiki/CPU-Benchmarks
 // for benchmarks.
@@ -19,8 +19,10 @@ func PreferOpenSSL() bool {
 		return false
 	}
 	// Safe to call on other architectures - will just read false.
-	if cpu.X86.HasAES {
+	if cpu.X86.HasAES || cpu.ARM64.HasAES {
+		// Go stdlib is probably faster
 		return false
 	}
+	// Openssl is probably faster
 	return true
 }