Implementation notes: amd64, cel02, crypto_sign/ecdonaldb409

Computer: cel02
Architecture: amd64
CPU ID: GenuineIntel-00050657-bfebfbff
SUPERCOP version: 20201130
Operation: crypto_sign
Primitive: ecdonaldb409

Compiler output

Implementation: T:openssl
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

signatureofshorthash.c: signatureofshorthash.c:54:24: error: incomplete definition of type 'struct ECDSA_SIG_st'
signatureofshorthash.c: len = BN_num_bytes(rs->r); if (len > PRIME_BYTES) goto rserror;
signatureofshorthash.c: ~~^
signatureofshorthash.c: /usr/include/openssl/bn.h:193:40: note: expanded from macro 'BN_num_bytes'
signatureofshorthash.c: # define BN_num_bytes(a) ((BN_num_bits(a)+7)/8)
signatureofshorthash.c: ^
signatureofshorthash.c: /usr/include/openssl/ec.h:1039:16: note: forward declaration of 'struct ECDSA_SIG_st'
signatureofshorthash.c: typedef struct ECDSA_SIG_st ECDSA_SIG;
signatureofshorthash.c: ^
signatureofshorthash.c: signatureofshorthash.c:55:15: error: incomplete definition of type 'struct ECDSA_SIG_st'
signatureofshorthash.c: BN_bn2bin(rs->r,sm + PRIME_BYTES - len); sm += PRIME_BYTES;
signatureofshorthash.c: ~~^
signatureofshorthash.c: /usr/include/openssl/ec.h:1039:16: note: forward declaration of 'struct ECDSA_SIG_st'
signatureofshorthash.c: typedef struct ECDSA_SIG_st ECDSA_SIG;
signatureofshorthash.c: ^
signatureofshorthash.c: signatureofshorthash.c:57:24: error: incomplete definition of type 'struct ECDSA_SIG_st'
signatureofshorthash.c: len = BN_num_bytes(rs->s); if (len > PRIME_BYTES) goto rserror;
signatureofshorthash.c: ~~^
signatureofshorthash.c: /usr/include/openssl/bn.h:193:40: note: expanded from macro 'BN_num_bytes'
signatureofshorthash.c: # define BN_num_bytes(a) ((BN_num_bits(a)+7)/8)
signatureofshorthash.c: ^
signatureofshorthash.c: /usr/include/openssl/ec.h:1039:16: note: forward declaration of 'struct ECDSA_SIG_st'
signatureofshorthash.c: typedef struct ECDSA_SIG_st ECDSA_SIG;
signatureofshorthash.c: ^
signatureofshorthash.c: signatureofshorthash.c:58:15: error: incomplete definition of type 'struct ECDSA_SIG_st'
signatureofshorthash.c: ...

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:openssl
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:openssl
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:openssl
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:openssl
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:openssl

Compiler output

Implementation: T:openssl
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

signatureofshorthash.c: In file included from /usr/include/openssl/asn1.h:24:0,
signatureofshorthash.c: from /usr/include/openssl/objects.h:916,
signatureofshorthash.c: from signatureofshorthash.c:2:
signatureofshorthash.c: signatureofshorthash.c: In function 'crypto_sign_ecdonaldb409_openssl_timingleaks_signatureofshorthash':
signatureofshorthash.c: signatureofshorthash.c:54:24: error: dereferencing pointer to incomplete type 'ECDSA_SIG {aka struct ECDSA_SIG_st}'
signatureofshorthash.c: len = BN_num_bytes(rs->r); if (len > PRIME_BYTES) goto rserror;
signatureofshorthash.c: ^

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:openssl
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:openssl
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:openssl
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:openssl

Compiler output

Implementation: T:opensslnew
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

signatureofshorthash.c: signatureofshorthash.c:56:7: warning: implicit declaration of function 'ECDSA_SIG_get0_r' is invalid in C99 [-Wimplicit-function-declaration]
signatureofshorthash.c: z = ECDSA_SIG_get0_r(rs);
signatureofshorthash.c: ^
signatureofshorthash.c: signatureofshorthash.c:56:5: warning: incompatible integer to pointer conversion assigning to 'const BIGNUM *' (aka 'const struct bignum_st *') from 'int' [-Wint-conversion]
signatureofshorthash.c: z = ECDSA_SIG_get0_r(rs);
signatureofshorthash.c: ^ ~~~~~~~~~~~~~~~~~~~~
signatureofshorthash.c: signatureofshorthash.c:61:7: warning: implicit declaration of function 'ECDSA_SIG_get0_s' is invalid in C99 [-Wimplicit-function-declaration]
signatureofshorthash.c: z = ECDSA_SIG_get0_s(rs);
signatureofshorthash.c: ^
signatureofshorthash.c: signatureofshorthash.c:61:5: warning: incompatible integer to pointer conversion assigning to 'const BIGNUM *' (aka 'const struct bignum_st *') from 'int' [-Wint-conversion]
signatureofshorthash.c: z = ECDSA_SIG_get0_s(rs);
signatureofshorthash.c: ^ ~~~~~~~~~~~~~~~~~~~~
signatureofshorthash.c: 4 warnings generated.
try.c: fatal error: error in backend: Cannot select: 0x558c879f8b90: v4i64 = X86ISD::VTRUNC 0x558c879f8a60
try.c: 0x558c879f8a60: v16i32 = vselect 0x558c879f2950, 0x558c87994e00, 0x558c879f8930
try.c: 0x558c879f2950: v4i1 = X86ISD::PCMPGTM 0x558c879f0930, 0x558c879ec4c0
try.c: 0x558c879f0930: v4i64 = X86ISD::VBROADCAST 0x558c87990e40
try.c: 0x558c87990e40: i64,ch = load<LD8[%lsr.iv6971]> 0x558c87901920, 0x558c879ab3c0, undef:i64
try.c: 0x558c879ab3c0: i64,ch = CopyFromReg 0x558c87901920, Register:i64 %vreg50
try.c: 0x558c879ec720: i64 = Register %vreg50
try.c: 0x558c87993470: i64 = undef
try.c: 0x558c879ec4c0: v4i64,ch = CopyFromReg 0x558c87901920, Register:v4i64 %vreg13
try.c: 0x558c879f1180: v4i64 = Register %vreg13
try.c: 0x558c87994e00: v16i32 = X86ISD::VBROADCAST 0x558c879f0b90
try.c: 0x558c879f0b90: i32,ch = load<LD4[ConstantPool]> 0x558c87901920, 0x558c87990420, undef:i64
try.c: 0x558c87990420: i64 = X86ISD::WrapperRIP TargetConstantPool:i64<i32 1> 0
try.c: 0x558c879d9c00: i64 = TargetConstantPool<i32 1> 0
try.c: 0x558c87993470: i64 = undef
try.c: 0x558c879f8930: v16i32 = BUILD_VECTOR Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>
try.c: 0x558c879f8800: i32 = Constant<0>
try.c: 0x558c879f8800: i32 = Constant<0>
try.c: 0x558c879f8800: i32 = Constant<0>
try.c: 0x558c879f8800: i32 = Constant<0>
try.c: 0x558c879f8800: i32 = Constant<0>
try.c: 0x558c879f8800: i32 = Constant<0>
try.c: 0x558c879f8800: i32 = Constant<0>
try.c: 0x558c879f8800: i32 = Constant<0>
try.c: 0x558c879f8800: i32 = Constant<0>
try.c: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opensslnew

Compiler output

Implementation: T:opensslnew
Security model: timingleaks
Compiler: clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

signatureofshorthash.c: signatureofshorthash.c:56:7: warning: implicit declaration of function 'ECDSA_SIG_get0_r' is invalid in C99 [-Wimplicit-function-declaration]
signatureofshorthash.c: z = ECDSA_SIG_get0_r(rs);
signatureofshorthash.c: ^
signatureofshorthash.c: signatureofshorthash.c:56:5: warning: incompatible integer to pointer conversion assigning to 'const BIGNUM *' (aka 'const struct bignum_st *') from 'int' [-Wint-conversion]
signatureofshorthash.c: z = ECDSA_SIG_get0_r(rs);
signatureofshorthash.c: ^ ~~~~~~~~~~~~~~~~~~~~
signatureofshorthash.c: signatureofshorthash.c:61:7: warning: implicit declaration of function 'ECDSA_SIG_get0_s' is invalid in C99 [-Wimplicit-function-declaration]
signatureofshorthash.c: z = ECDSA_SIG_get0_s(rs);
signatureofshorthash.c: ^
signatureofshorthash.c: signatureofshorthash.c:61:5: warning: incompatible integer to pointer conversion assigning to 'const BIGNUM *' (aka 'const struct bignum_st *') from 'int' [-Wint-conversion]
signatureofshorthash.c: z = ECDSA_SIG_get0_s(rs);
signatureofshorthash.c: ^ ~~~~~~~~~~~~~~~~~~~~
signatureofshorthash.c: 4 warnings generated.
try.c: fatal error: error in backend: Cannot select: 0x563d8ac17f60: v4i64 = X86ISD::VTRUNC 0x563d8ac17e30
try.c: 0x563d8ac17e30: v16i32 = vselect 0x563d8ac088d0, 0x563d8ab8bd10, 0x563d8ac17d00
try.c: 0x563d8ac088d0: v4i1 = X86ISD::PCMPGTM 0x563d8abf3f40, 0x563d8abefad0
try.c: 0x563d8abf3f40: v4i64 = X86ISD::VBROADCAST 0x563d8ab8c1d0
try.c: 0x563d8ab8c1d0: i64,ch = load<LD8[%lsr.iv6971]> 0x563d8aaeda30, 0x563d8ab8a470, undef:i64
try.c: 0x563d8ab8a470: i64,ch = CopyFromReg 0x563d8aaeda30, Register:i64 %vreg50
try.c: 0x563d8abefd30: i64 = Register %vreg50
try.c: 0x563d8ab81b80: i64 = undef
try.c: 0x563d8abefad0: v4i64,ch = CopyFromReg 0x563d8aaeda30, Register:v4i64 %vreg13
try.c: 0x563d8abf4790: v4i64 = Register %vreg13
try.c: 0x563d8ab8bd10: v16i32 = X86ISD::VBROADCAST 0x563d8abf41a0
try.c: 0x563d8abf41a0: i32,ch = load<LD4[ConstantPool]> 0x563d8aaeda30, 0x563d8ab88a40, undef:i64
try.c: 0x563d8ab88a40: i64 = X86ISD::WrapperRIP TargetConstantPool:i64<i32 1> 0
try.c: 0x563d8ab82500: i64 = TargetConstantPool<i32 1> 0
try.c: 0x563d8ab81b80: i64 = undef
try.c: 0x563d8ac17d00: v16i32 = BUILD_VECTOR Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>
try.c: 0x563d8ac17bd0: i32 = Constant<0>
try.c: 0x563d8ac17bd0: i32 = Constant<0>
try.c: 0x563d8ac17bd0: i32 = Constant<0>
try.c: 0x563d8ac17bd0: i32 = Constant<0>
try.c: 0x563d8ac17bd0: i32 = Constant<0>
try.c: 0x563d8ac17bd0: i32 = Constant<0>
try.c: 0x563d8ac17bd0: i32 = Constant<0>
try.c: 0x563d8ac17bd0: i32 = Constant<0>
try.c: 0x563d8ac17bd0: i32 = Constant<0>
try.c: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opensslnew

Compiler output

Implementation: T:opensslnew
Security model: timingleaks
Compiler: clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

signatureofshorthash.c: signatureofshorthash.c:56:7: warning: implicit declaration of function 'ECDSA_SIG_get0_r' is invalid in C99 [-Wimplicit-function-declaration]
signatureofshorthash.c: z = ECDSA_SIG_get0_r(rs);
signatureofshorthash.c: ^
signatureofshorthash.c: signatureofshorthash.c:56:5: warning: incompatible integer to pointer conversion assigning to 'const BIGNUM *' (aka 'const struct bignum_st *') from 'int' [-Wint-conversion]
signatureofshorthash.c: z = ECDSA_SIG_get0_r(rs);
signatureofshorthash.c: ^ ~~~~~~~~~~~~~~~~~~~~
signatureofshorthash.c: signatureofshorthash.c:61:7: warning: implicit declaration of function 'ECDSA_SIG_get0_s' is invalid in C99 [-Wimplicit-function-declaration]
signatureofshorthash.c: z = ECDSA_SIG_get0_s(rs);
signatureofshorthash.c: ^
signatureofshorthash.c: signatureofshorthash.c:61:5: warning: incompatible integer to pointer conversion assigning to 'const BIGNUM *' (aka 'const struct bignum_st *') from 'int' [-Wint-conversion]
signatureofshorthash.c: z = ECDSA_SIG_get0_s(rs);
signatureofshorthash.c: ^ ~~~~~~~~~~~~~~~~~~~~
signatureofshorthash.c: 4 warnings generated.
try.c: fatal error: error in backend: Cannot select: 0x560f13843370: v4i64 = X86ISD::VTRUNC 0x560f13843240
try.c: 0x560f13843240: v16i32 = vselect 0x560f13847760, 0x560f137eaba0, 0x560f13843110
try.c: 0x560f13847760: v4i1 = X86ISD::PCMPGTM 0x560f1383c9d0, 0x560f13838560
try.c: 0x560f1383c9d0: v4i64 = X86ISD::VBROADCAST 0x560f137ddf50
try.c: 0x560f137ddf50: i64,ch = load<LD8[%lsr.iv6971]> 0x560f1374d900, 0x560f138333c0, undef:i64
try.c: 0x560f138333c0: i64,ch = CopyFromReg 0x560f1374d900, Register:i64 %vreg50
try.c: 0x560f138387c0: i64 = Register %vreg50
try.c: 0x560f137e9210: i64 = undef
try.c: 0x560f13838560: v4i64,ch = CopyFromReg 0x560f1374d900, Register:v4i64 %vreg13
try.c: 0x560f1383d220: v4i64 = Register %vreg13
try.c: 0x560f137eaba0: v16i32 = X86ISD::VBROADCAST 0x560f1383cc30
try.c: 0x560f1383cc30: i32,ch = load<LD4[ConstantPool]> 0x560f1374d900, 0x560f137dd530, undef:i64
try.c: 0x560f137dd530: i64 = X86ISD::WrapperRIP TargetConstantPool:i64<i32 1> 0
try.c: 0x560f138302e0: i64 = TargetConstantPool<i32 1> 0
try.c: 0x560f137e9210: i64 = undef
try.c: 0x560f13843110: v16i32 = BUILD_VECTOR Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>, Constant:i32<0>
try.c: 0x560f13842fe0: i32 = Constant<0>
try.c: 0x560f13842fe0: i32 = Constant<0>
try.c: 0x560f13842fe0: i32 = Constant<0>
try.c: 0x560f13842fe0: i32 = Constant<0>
try.c: 0x560f13842fe0: i32 = Constant<0>
try.c: 0x560f13842fe0: i32 = Constant<0>
try.c: 0x560f13842fe0: i32 = Constant<0>
try.c: 0x560f13842fe0: i32 = Constant<0>
try.c: 0x560f13842fe0: i32 = Constant<0>
try.c: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opensslnew

Compiler output

Implementation: T:opensslnew
Security model: timingleaks
Compiler: clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

Number of similar (compiler,implementation) pairs: 2, namely:

Compiler	Implementations
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opensslnew
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opensslnew

Compiler output

Implementation: T:opensslnew
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

signatureofshorthash.c: signatureofshorthash.c: In function 'crypto_sign_ecdonaldb409_opensslnew_timingleaks_signatureofshorthash':
signatureofshorthash.c: signatureofshorthash.c:56:7: warning: implicit declaration of function 'ECDSA_SIG_get0_r' [-Wimplicit-function-declaration]
signatureofshorthash.c: z = ECDSA_SIG_get0_r(rs);
signatureofshorthash.c: ^~~~~~~~~~~~~~~~
signatureofshorthash.c: signatureofshorthash.c:56:5: warning: assignment makes pointer from integer without a cast [-Wint-conversion]
signatureofshorthash.c: z = ECDSA_SIG_get0_r(rs);
signatureofshorthash.c: ^
signatureofshorthash.c: signatureofshorthash.c:61:7: warning: implicit declaration of function 'ECDSA_SIG_get0_s' [-Wimplicit-function-declaration]
signatureofshorthash.c: z = ECDSA_SIG_get0_s(rs);
signatureofshorthash.c: ^~~~~~~~~~~~~~~~
signatureofshorthash.c: signatureofshorthash.c:61:5: warning: assignment makes pointer from integer without a cast [-Wint-conversion]
signatureofshorthash.c: z = ECDSA_SIG_get0_s(rs);
signatureofshorthash.c: ^
try.c: crypto_sign_ecdonaldb409.a(signatureofshorthash.o): In function `crypto_sign_ecdonaldb409_opensslnew_timingleaks_signatureofshorthash':
try.c: signatureofshorthash.c:(.text+0x...): undefined reference to `ECDSA_SIG_get0_r'
try.c: signatureofshorthash.c:(.text+0x...): undefined reference to `ECDSA_SIG_get0_s'
try.c: collect2: error: ld returned 1 exit status

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opensslnew
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opensslnew
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opensslnew
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opensslnew