Implementation notes: amd64, bolero, crypto_stream/speck128128ctr

Computer: bolero
Microarchitecture: amd64; BW+AES (406f1)
Architecture: amd64
CPU ID: GenuineIntel-000406f1-bfebfbff
SUPERCOP version: 20221122
Operation: crypto_stream
Primitive: speck128128ctr

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
2084	34311 0 0	46297 752 824	`T:avx2`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200819	20200816
2144	33814 0 0	46821 768 856	`T:avx2`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200819	20200816
2164	35866 0 0	51177 776 800	`T:avx2`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20200819	20200816
2164	35866 0 0	51177 776 800	`T:avx2`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20200819	20200816
2168	35866 0 0	51177 776 800	`T:avx2`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20200819	20200816
2172	33518 0 0	44983 768 800	`T:avx2`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20200819	20200816
2172	34639 0 0	51062 776 856	`T:avx2`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200819	20200816
2180	33916 0 0	47077 768 856	`T:avx2`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200819	20200816
4080	29978 0 0	46422 776 856	`T:sse4`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200819	20200816
4120	28110 0 0	41117 768 856	`T:sse4`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200819	20200816
4228	26681 0 0	38271 768 800	`T:sse4`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20200819	20200816
4240	28973 0 0	44385 776 800	`T:sse4`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20200819	20200816
4240	28973 0 0	44401 776 800	`T:sse4`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20200819	20200816
4240	28973 0 0	44385 776 800	`T:sse4`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20200819	20200816
6556	15105 0 0	28261 768 856	`T:sse4`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200819	20200816
6584	14790 0 0	26777 752 824	`T:sse4`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200819	20200816

Compiler output

Implementation: T:avx2
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

stream.c: stream.c:288:3: error: always_inline function '_mm256_set_epi64x' requires target feature 'sse4.2', but would be inlined into function 'ExpandKey' that is compiled without support for 'sse4.2'
stream.c: EK(A,B,rk,key);
stream.c: ^
stream.c: ./Speck128128AVX2.h:54:24: note: expanded from macro 'EK'
stream.c: #define EK(A,B,k,key) (RK(B,A,k,key,0), RK(B,A,k,key,1), RK(B,A,k,key,2), RK(B,A,k,key,3), RK(B,A,k,key,4), RK(B,A,k,key,5), RK(B,A,k,key,6), \
stream.c: ^
stream.c: ./Speck128128AVX2.h:52:28: note: expanded from macro 'RK'
stream.c: #define RK(X,Y,k,key,i) (SET1(k[i],Y), key[i]=Y, X=RCS(X,8), X+=Y, X^=i, Y=LCS(Y,3), Y^=X)
stream.c: ^
stream.c: ./Intrinsics_AVX2_128block.h:25:22: note: expanded from macro 'SET1'
stream.c: #define SET1(X,c) (X=SET(c,c,c,c))
stream.c: ^
stream.c: ./Intrinsics_AVX2_128block.h:24:13: note: expanded from macro 'SET'
stream.c: #define SET _mm256_set_epi64x
stream.c: ^
stream.c: stream.c:288:3: error: always_inline function '_mm256_set_epi64x' requires target feature 'sse4.2', but would be inlined into function 'ExpandKey' that is compiled without support for 'sse4.2'
stream.c: ./Speck128128AVX2.h:54:42: note: expanded from macro 'EK'
stream.c: #define EK(A,B,k,key) (RK(B,A,k,key,0), RK(B,A,k,key,1), RK(B,A,k,key,2), RK(B,A,k,key,3), RK(B,A,k,key,4), RK(B,A,k,key,5), RK(B,A,k,key,6), \
stream.c: ^
stream.c: ./Speck128128AVX2.h:52:28: note: expanded from macro 'RK'
stream.c: #define RK(X,Y,k,key,i) (SET1(k[i],Y), key[i]=Y, X=RCS(X,8), X+=Y, X^=i, Y=LCS(Y,3), Y^=X)
stream.c: ^
stream.c: ./Intrinsics_AVX2_128block.h:25:22: note: expanded from macro 'SET1'
stream.c: #define SET1(X,c) (X=SET(c,c,c,c))
stream.c: ^
stream.c: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2

Compiler output

Implementation: T:avx512
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

stream.c: stream.c:329:3: error: always_inline function '_mm512_set_epi64' requires target feature 'avx512f', but would be inlined into function 'ExpandKey' that is compiled without support for 'avx512f'
stream.c: EK(A,B,rk,key);
stream.c: ^
stream.c: ./Speck128128AVX512.h:59:24: note: expanded from macro 'EK'
stream.c: #define EK(A,B,k,key) (RK(B,A,k,key,0), RK(B,A,k,key,1), RK(B,A,k,key,2), RK(B,A,k,key,3), RK(B,A,k,key,4), RK(B,A,k,key,5), RK(B,A,k,key,6), \
stream.c: ^
stream.c: ./Speck128128AVX512.h:57:26: note: expanded from macro 'RK'
stream.c: #define RK(X,Y,k,key,i) (SET1(k[i],Y), key[i]=Y, X=RCS(X,8), X+=Y, X^=i, Y=LCS(Y,3), Y^=X)
stream.c: ^
stream.c: ./Intrinsics_AVX512_128block.h:25:22: note: expanded from macro 'SET1'
stream.c: #define SET1(X,c) (X=SET(c,c,c,c,c,c,c,c))
stream.c: ^
stream.c: ./Intrinsics_AVX512_128block.h:16:13: note: expanded from macro 'SET'
stream.c: #define SET _mm512_set_epi64
stream.c: ^
stream.c: stream.c:329:3: error: always_inline function '_mm512_set_epi64' requires target feature 'avx512f', but would be inlined into function 'ExpandKey' that is compiled without support for 'avx512f'
stream.c: ./Speck128128AVX512.h:59:42: note: expanded from macro 'EK'
stream.c: #define EK(A,B,k,key) (RK(B,A,k,key,0), RK(B,A,k,key,1), RK(B,A,k,key,2), RK(B,A,k,key,3), RK(B,A,k,key,4), RK(B,A,k,key,5), RK(B,A,k,key,6), \
stream.c: ^
stream.c: ./Speck128128AVX512.h:57:26: note: expanded from macro 'RK'
stream.c: #define RK(X,Y,k,key,i) (SET1(k[i],Y), key[i]=Y, X=RCS(X,8), X+=Y, X^=i, Y=LCS(Y,3), Y^=X)
stream.c: ^
stream.c: ./Intrinsics_AVX512_128block.h:25:22: note: expanded from macro 'SET1'
stream.c: #define SET1(X,c) (X=SET(c,c,c,c,c,c,c,c))
stream.c: ^
stream.c: ...

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx512
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx512
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx512
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx512

Compiler output

Implementation: T:avx512
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

stream.c: stream.c:329:3: error: always_inline function '_mm512_set_epi64' requires target feature 'avx2', but would be inlined into function 'ExpandKey' that is compiled without support for 'avx2'
stream.c: EK(A,B,rk,key);
stream.c: ^
stream.c: ./Speck128128AVX512.h:59:24: note: expanded from macro 'EK'
stream.c: #define EK(A,B,k,key) (RK(B,A,k,key,0), RK(B,A,k,key,1), RK(B,A,k,key,2), RK(B,A,k,key,3), RK(B,A,k,key,4), RK(B,A,k,key,5), RK(B,A,k,key,6), \
stream.c: ^
stream.c: ./Speck128128AVX512.h:57:26: note: expanded from macro 'RK'
stream.c: #define RK(X,Y,k,key,i) (SET1(k[i],Y), key[i]=Y, X=RCS(X,8), X+=Y, X^=i, Y=LCS(Y,3), Y^=X)
stream.c: ^
stream.c: ./Intrinsics_AVX512_128block.h:25:22: note: expanded from macro 'SET1'
stream.c: #define SET1(X,c) (X=SET(c,c,c,c,c,c,c,c))
stream.c: ^
stream.c: ./Intrinsics_AVX512_128block.h:16:13: note: expanded from macro 'SET'
stream.c: #define SET _mm512_set_epi64
stream.c: ^
stream.c: stream.c:329:3: error: always_inline function '_mm512_set_epi64' requires target feature 'avx2', but would be inlined into function 'ExpandKey' that is compiled without support for 'avx2'
stream.c: ./Speck128128AVX512.h:59:42: note: expanded from macro 'EK'
stream.c: #define EK(A,B,k,key) (RK(B,A,k,key,0), RK(B,A,k,key,1), RK(B,A,k,key,2), RK(B,A,k,key,3), RK(B,A,k,key,4), RK(B,A,k,key,5), RK(B,A,k,key,6), \
stream.c: ^
stream.c: ./Speck128128AVX512.h:57:26: note: expanded from macro 'RK'
stream.c: #define RK(X,Y,k,key,i) (SET1(k[i],Y), key[i]=Y, X=RCS(X,8), X+=Y, X^=i, Y=LCS(Y,3), Y^=X)
stream.c: ^
stream.c: ./Intrinsics_AVX512_128block.h:25:22: note: expanded from macro 'SET1'
stream.c: #define SET1(X,c) (X=SET(c,c,c,c,c,c,c,c))
stream.c: ^
stream.c: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx512

Compiler output

Implementation: T:avx512
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

stream.c: In file included from Speck128128AVX512.h:17:0,
stream.c: from stream.c:21:
stream.c: stream.c: In function 'Encrypt':
stream.c: Intrinsics_AVX512_128block.h:25:21: warning: AVX512F vector return without AVX512F enabled changes the ABI [-Wpsabi]
stream.c: #define SET1(X,c) (X=SET(c,c,c,c,c,c,c,c))
stream.c: ~~^~~~~~~~~~~~~~~~~~~~~~
stream.c: stream.c:135:5: note: in expansion of macro 'SET1'
stream.c: SET1(X[0],nonce[1]); SET8(Y[0],nonce[0]);
stream.c: ^~~~
stream.c: In file included from /usr/lib/gcc/x86_64-linux-gnu/7/include/immintrin.h:45:0,
stream.c: from Intrinsics_AVX512_128block.h:5,
stream.c: from Speck128128AVX512.h:17,
stream.c: from stream.c:21:
stream.c: /usr/lib/gcc/x86_64-linux-gnu/7/include/avx512fintrin.h:5831:1: error: inlining failed in call to always_inline '_mm512_storeu_si512': target specific option mismatch
stream.c: _mm512_storeu_si512 (void *__P, __m512i __A)
stream.c: ^~~~~~~~~~~~~~~~~~~
stream.c: In file included from Speck128128AVX512.h:17:0,
stream.c: from stream.c:21:
stream.c: Intrinsics_AVX512_128block.h:32:18: note: called from here
stream.c: #define ST(ip,X) _mm512_storeu_si512((void *)(ip),X)
stream.c: ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
stream.c: Intrinsics_AVX512_128block.h:33:43: note: in expansion of macro 'ST'
stream.c: #define STORE(out,X,Y) (ST(out,LOW(Y,X)), ST(out+64,HIGH(Y,X)))
stream.c: ^~
stream.c: stream.c:138:5: note: in expansion of macro 'STORE'
stream.c: ...

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx512
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx512
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx512
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx512

Compiler output

Implementation: T:sse4
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

stream.c: stream.c:114:21: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'Encrypt' that is compiled without support for 'ssse3'
stream.c: if (numbytes==32) Enc(X,Y,rk,2);
stream.c: ^
stream.c: ./Speck128128SSE4.h:42:23: note: expanded from macro 'Enc'
stream.c: #define Enc(X,Y,k,n) (Rx##n(X,Y,k[0]), Rx##n(X,Y,k[1]), Rx##n(X,Y,k[2]), Rx##n(X,Y,k[3]), Rx##n(X,Y,k[4]), Rx##n(X,Y,k[5]), Rx##n(X,Y,k[6]), Rx##n(X,Y,k[7]), \
stream.c: ^
stream.c: <scratch space>:91:1: note: expanded from here
stream.c: Rx2
stream.c: ^
stream.c: ./Speck128128SSE4.h:25:21: note: expanded from macro 'Rx2'
stream.c: #define Rx2(X,Y,k) (R(X[0],Y[0],k))
stream.c: ^
stream.c: ./Speck128128SSE4.h:23:29: note: expanded from macro 'R'
stream.c: #define R(X,Y,k) (X=XOR(ADD(ROR8(X),Y),k), Y=XOR(ROL(Y,3),X))
stream.c: ^
stream.c: ./Intrinsics_SSE4_128block.h:41:19: note: expanded from macro 'ROR8'
stream.c: #define ROR8(X) (SHFL(X,R8))
stream.c: ^
stream.c: ./Intrinsics_SSE4_128block.h:37:14: note: expanded from macro 'SHFL'
stream.c: #define SHFL _mm_shuffle_epi8
stream.c: ^
stream.c: stream.c:114:21: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'Encrypt' that is compiled without support for 'ssse3'
stream.c: ./Speck128128SSE4.h:42:41: note: expanded from macro 'Enc'
stream.c: #define Enc(X,Y,k,n) (Rx##n(X,Y,k[0]), Rx##n(X,Y,k[1]), Rx##n(X,Y,k[2]), Rx##n(X,Y,k[3]), Rx##n(X,Y,k[4]), Rx##n(X,Y,k[5]), Rx##n(X,Y,k[6]), Rx##n(X,Y,k[7]), \
stream.c: ^
stream.c: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:sse4

Namespace violations

Implementation: T:avx2
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

stream.o ExpandKey T

Number of similar (compiler,implementation) pairs: 8, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2

Namespace violations

Implementation: T:sse4
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

stream.o Encrypt T
stream.o Encrypt_Xor T
stream.o ExpandKey T

Number of similar (compiler,implementation) pairs: 8, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:sse4
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:sse4
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:sse4
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:sse4
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:sse4
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:sse4
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:sse4
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:sse4