Show me the runtime complexity of the sig function in terms of payload length and we'll see.
Okay - I get your point - I was assuming you'd actually use something like SHA256 over the transaction data and then just apply the EC signature to that (rather than applying the signature algorithm to all of the data).
My (perhaps incorrect) assumption is that EC signature algorithms are much slower than hash algorithms like SHA256.