Implementation notes: amd64, colossus6, crypto_kem/r5n13kem0d

Computer: colossus6
Architecture: amd64
CPU ID: AuthenticAMD-00830f10-178bfbff
SUPERCOP version: 20201018
Operation: crypto_kem
Primitive: r5n13kem0d

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
1453433	37100 0 0	172758 880 1600	`T:avx2`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200821	20200816
1953720	25709 0 0	166758 880 1600	`T:avx2`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200821	20200816
2352285	22462 0 0	164398 872 1568	`T:avx2`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200821	20200816
2562705	26060 0 0	167462 880 1600	`T:avx2`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200821	20200816
17051242	34771 0 0	170454 880 1600	`T:opt`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200821	20200816
17567528	24679 0 0	165750 880 1600	`T:opt`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200821	20200816
18097898	25009 0 0	166398 880 1600	`T:opt`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200821	20200816
18426667	21594 0 0	163582 872 1568	`T:opt`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200821	20200816
849832335	33524 652 520	181790 1496 2144	`T:ref`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200821	20200816
870550043	31421 652 520	180414 1496 2144	`T:ref`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200821	20200816
872084880	50152 652 520	198022 1496 2144	`T:ref`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200821	20200816
1070371147	26493 652 520	179691 1560 2112	`T:ref`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200821	20200816

Namespace violations

Implementation: T:avx2
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

a_fixed.o create_A_fixed T
a_random.o create_A_random T
drbg.o drbg_sampler16_2_once T
drbg.o drbg_sampler16_2_once_customization T
little_endian.o u16_from_le T
little_endian.o u16_to_le T
little_endian.o u32_from_le T
little_endian.o u32_to_le T
little_endian.o u64_from_le T
little_endian.o u64_to_le T
little_endian.o u8_from_le T
little_endian.o u8_to_le T
matmul_avx2.o matmul_as_q T
matmul_avx2.o matmul_rta_q T
matmul_avx2.o matmul_stu_p T
matmul_avx2.o sum_array_elements T
matmul_cm.o create_secret_matrix_r_t T
matmul_cm.o create_secret_matrix_s_t T
matmul_cm.o matmul_btr_p T
misc.o ceil_log2 T
misc.o print_hex T
misc.o print_sage_s_matrix T
misc.o print_sage_s_vector T
misc.o print_sage_s_vector_matrix T
misc.o print_sage_u_matrix T
misc.o print_sage_u_vector T
misc.o print_sage_u_vector_matrix T
probe_cm.o probe_cm_even T
probe_cm.o probe_cm_odd T
r5_cca_kem.o r5_cca_kem_decapsulate T
r5_cca_kem.o r5_cca_kem_encapsulate T
r5_cca_kem.o r5_cca_kem_keygen T
r5_cca_pke.o r5_cca_pke_decrypt T
r5_cca_pke.o r5_cca_pke_encrypt T
r5_cca_pke.o r5_cca_pke_keygen T
r5_cpa_kem.o r5_cpa_kem_decapsulate T
r5_cpa_kem.o r5_cpa_kem_encapsulate T
r5_cpa_kem.o r5_cpa_kem_keygen T
r5_cpa_pke_n1.o r5_cpa_pke_decrypt T
r5_cpa_pke_n1.o r5_cpa_pke_encrypt T
r5_cpa_pke_n1.o r5_cpa_pke_keygen T
r5_dem.o round5_dem T
r5_dem.o round5_dem_inverse T
r5_hash.o hash T
r5_hash.o hash_customization T
r5_memory.o checked_calloc T
r5_memory.o checked_malloc T
r5_memory.o checked_realloc T
r5_memory.o conditional_constant_time_memcpy T
r5_memory.o constant_time_memcmp T
shake.o cshake128 T
shake.o cshake128_absorb T
shake.o cshake128_init T
shake.o cshake128_squeezeblocks T
shake.o cshake256 T
shake.o cshake256_absorb T
shake.o cshake256_init T
shake.o cshake256_squeezeblocks T
shake.o shake128 T
shake.o shake128_absorb T
shake.o shake128_init T
shake.o shake128_squeezeblocks T
shake.o shake256 T
shake.o shake256_absorb T
shake.o shake256_init T
shake.o shake256_squeezeblocks T
xe2_c16.o xe2_53_compute T
xe2_c16.o xe2_53_fixerr T
xe4_c64.o xe4_163_compute T
xe4_c64.o xe4_163_fixerr T
xe5_c64.o xe5_190_compute T
xe5_c64.o xe5_190_fixerr T
xe5_c64.o xe5_218_compute T
xe5_c64.o xe5_218_fixerr T
xe5_c64.o xe5_234_compute T
xe5_c64.o xe5_234_fixerr T
xef_ref.o xef_compute T
xef_ref.o xef_fixerr T
xef_ref.o xef_reg R

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2

Namespace violations

Implementation: T:opt
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

a_fixed.o create_A_fixed T
a_random.o create_A_random T
drbg.o drbg_sampler16_2_once T
drbg.o drbg_sampler16_2_once_customization T
little_endian.o u16_from_le T
little_endian.o u16_to_le T
little_endian.o u32_from_le T
little_endian.o u32_to_le T
little_endian.o u64_from_le T
little_endian.o u64_to_le T
little_endian.o u8_from_le T
little_endian.o u8_to_le T
matmul_cm.o create_secret_matrix_r_t T
matmul_cm.o create_secret_matrix_s_t T
matmul_cm.o matmul_as_q T
matmul_cm.o matmul_btr_p T
matmul_cm.o matmul_rta_q T
matmul_cm.o matmul_stu_p T
misc.o ceil_log2 T
misc.o print_hex T
misc.o print_sage_s_matrix T
misc.o print_sage_s_vector T
misc.o print_sage_s_vector_matrix T
misc.o print_sage_u_matrix T
misc.o print_sage_u_vector T
misc.o print_sage_u_vector_matrix T
probe_cm.o probe_cm_even T
probe_cm.o probe_cm_odd T
r5_cca_kem.o r5_cca_kem_decapsulate T
r5_cca_kem.o r5_cca_kem_encapsulate T
r5_cca_kem.o r5_cca_kem_keygen T
r5_cca_pke.o r5_cca_pke_decrypt T
r5_cca_pke.o r5_cca_pke_encrypt T
r5_cca_pke.o r5_cca_pke_keygen T
r5_cpa_kem.o r5_cpa_kem_decapsulate T
r5_cpa_kem.o r5_cpa_kem_encapsulate T
r5_cpa_kem.o r5_cpa_kem_keygen T
r5_cpa_pke_n1.o r5_cpa_pke_decrypt T
r5_cpa_pke_n1.o r5_cpa_pke_encrypt T
r5_cpa_pke_n1.o r5_cpa_pke_keygen T
r5_dem.o round5_dem T
r5_dem.o round5_dem_inverse T
r5_hash.o hash T
r5_hash.o hash_customization T
r5_memory.o checked_calloc T
r5_memory.o checked_malloc T
r5_memory.o checked_realloc T
r5_memory.o conditional_constant_time_memcpy T
r5_memory.o constant_time_memcmp T
shake.o cshake128 T
shake.o cshake128_absorb T
shake.o cshake128_init T
shake.o cshake128_squeezeblocks T
shake.o cshake256 T
shake.o cshake256_absorb T
shake.o cshake256_init T
shake.o cshake256_squeezeblocks T
shake.o shake128 T
shake.o shake128_absorb T
shake.o shake128_init T
shake.o shake128_squeezeblocks T
shake.o shake256 T
shake.o shake256_absorb T
shake.o shake256_init T
shake.o shake256_squeezeblocks T
xe2_c16.o xe2_53_compute T
xe2_c16.o xe2_53_fixerr T
xe4_c64.o xe4_163_compute T
xe4_c64.o xe4_163_fixerr T
xe5_c64.o xe5_190_compute T
xe5_c64.o xe5_190_fixerr T
xe5_c64.o xe5_218_compute T
xe5_c64.o xe5_218_fixerr T
xe5_c64.o xe5_234_compute T
xe5_c64.o xe5_234_fixerr T
xef_ref.o xef_compute T
xef_ref.o xef_fixerr T
xef_ref.o xef_reg R

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt

Namespace violations

Implementation: T:ref
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

a_fixed.o A_fixed B
a_fixed.o A_fixed_len B
a_fixed.o create_A_fixed T
a_fixed.o r5_parameter_set_names C
a_fixed.o r5_parameter_sets C
a_random.o create_A_random T
a_random.o r5_parameter_set_names C
a_random.o r5_parameter_sets C
cca_encrypt.o r5_parameter_set_names C
cca_encrypt.o r5_parameter_sets C
cpa_kem.o r5_parameter_set_names C
cpa_kem.o r5_parameter_sets C
drbg.o drbg T
drbg.o drbg_init T
drbg.o drbg_init_customization T
drbg.o drbg_sampler16 T
drbg.o drbg_sampler16_2 T
drbg.o drbg_sampler16_2_once T
drbg.o drbg_sampler16_2_once_customization T
little_endian.o u16_from_le T
little_endian.o u16_to_le T
little_endian.o u32_from_le T
little_endian.o u32_to_le T
little_endian.o u64_from_le T
little_endian.o u64_to_le T
little_endian.o u8_from_le T
little_endian.o u8_to_le T
misc.o ceil_log2 T
misc.o print_hex T
misc.o print_sage_s_matrix T
misc.o print_sage_s_vector T
misc.o print_sage_s_vector_matrix T
misc.o print_sage_u_matrix T
misc.o print_sage_u_vector T
misc.o print_sage_u_vector_matrix T
pack.o pack T
pack.o pack_ct T
pack.o pack_pk T
pack.o unpack T
pack.o unpack_ct T
pack.o unpack_pk T
parameters.o get_crypto_bytes T
parameters.o get_crypto_cipher_text_bytes T
parameters.o get_crypto_public_key_bytes T
parameters.o get_crypto_secret_key_bytes T
parameters.o get_crypto_seed_bytes T
parameters.o r5_parameter_set_names C
parameters.o r5_parameter_sets C
parameters.o set_parameter_tau T
parameters.o set_parameter_tau2_len T
parameters.o set_parameters T
parameters.o set_parameters_from_api T
r5_cca_kem.o r5_cca_kem_decapsulate T
r5_cca_kem.o r5_cca_kem_encapsulate T
r5_cca_kem.o r5_cca_kem_keygen T
r5_cca_kem.o r5_parameter_set_names C
r5_cca_kem.o r5_parameter_sets C
r5_cca_pke.o r5_cca_pke_decrypt T
r5_cca_pke.o r5_cca_pke_encrypt T
r5_cca_pke.o r5_cca_pke_keygen T
r5_cca_pke.o r5_parameter_set_names C
r5_cca_pke.o r5_parameter_sets C
r5_core.o create_A T
r5_core.o create_R_T T
r5_core.o create_S_T T
r5_core.o decompress_matrix T
r5_core.o mult_matrix T
r5_core.o r5_parameter_set_names C
r5_core.o r5_parameter_sets C
r5_core.o round_matrix T
r5_core.o transpose_matrix T
r5_cpa_kem.o r5_cpa_kem_decapsulate T
r5_cpa_kem.o r5_cpa_kem_encapsulate T
r5_cpa_kem.o r5_cpa_kem_keygen T
r5_cpa_kem.o r5_parameter_set_names C
r5_cpa_kem.o r5_parameter_sets C
r5_cpa_pke.o r5_cpa_pke_decrypt T
r5_cpa_pke.o r5_cpa_pke_encrypt T
r5_cpa_pke.o r5_cpa_pke_keygen T
r5_cpa_pke.o r5_parameter_set_names C
r5_cpa_pke.o r5_parameter_sets C
r5_dem.o round5_dem T
r5_dem.o round5_dem_inverse T
r5_hash.o hash T
r5_hash.o hash_customization T
r5_memory.o checked_calloc T
r5_memory.o checked_malloc T
r5_memory.o checked_realloc T
r5_memory.o conditional_constant_time_memcpy T
r5_memory.o constant_time_memcmp T
r5_parameter_sets.o r5_parameter_set_names D
r5_parameter_sets.o r5_parameter_sets R
shake.o cshake128 T
shake.o cshake128_absorb T
shake.o cshake128_init T
shake.o cshake128_squeezeblocks T
shake.o cshake256 T
shake.o cshake256_absorb T
shake.o cshake256_init T
shake.o cshake256_squeezeblocks T
shake.o shake128 T
shake.o shake128_absorb T
shake.o shake128_init T
shake.o shake128_squeezeblocks T
shake.o shake256 T
shake.o shake256_absorb T
shake.o shake256_init T
shake.o shake256_squeezeblocks T
xef_ref.o xef_compute T
xef_ref.o xef_fixerr T
xef_ref.o xef_reg R

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref