Another, introduced around the same time (SHA instruction set): https://en.wikipedia.org/wiki/SHA_instruction_set

Yeah there are some of those, but IBM has stuff like Ed25519 signatures, x86 at least seems to be a bit on the back foot when it comes to implementing things like that. They will probably rather wait until AES is popular before they add it.