Implementation notes: amd64, comet, crypto_kem/r5n13kem0d

Computer: comet
Microarchitecture: amd64; Comet Lake (806ec)
Architecture: amd64
CPU ID: GenuineIntel-000806ec-bfebfbff
SUPERCOP version: 20240107
Operation: crypto_kem
Primitive: r5n13kem0d

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
1527336	41928 0 0	177460 924 1792	`T:avx2`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240116	20231222
1578074	33019 0 0	176100 924 1728	`T:avx2`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240116	20231222
1608173	34606 0 0	173686 868 1760	`T:avx2`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240116	20231222
2336961	24550 0 0	168530 916 1792	`T:avx2`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240116	20231222
2451873	23803 0 0	167972 924 1728	`T:avx2`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240116	20231222
2553822	25368 0 0	168598 868 1760	`T:avx2`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240116	20231222
2580938	22029 0 0	165262 860 1728	`T:avx2`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240116	20231222
3243502	24400 0 0	168598 868 1760	`T:avx2`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240116	20231222
14171200	32685 0 0	171734 868 1760	`T:opt`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240116	20231222
16748688	35475 0 0	173444 924 1728	`T:avx2`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240116	20231222
16752494	35475 0 0	173444 924 1728	`T:opt`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240116	20231222
16833522	41091 0 0	176652 924 1792	`T:opt`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240116	20231222
16871752	32553 0 0	175604 924 1728	`T:opt`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240116	20231222
17165208	24544 0 0	167798 868 1760	`T:opt`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240116	20231222
17663688	23094 0 0	167252 924 1728	`T:opt`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240116	20231222
17671237	23532 0 0	167766 868 1760	`T:opt`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240116	20231222
20208825	21362 0 0	164638 860 1728	`T:opt`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240116	20231222
46023322	23877 0 0	167882 916 1792	`T:opt`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240116	20231222

Compiler output

Implementation: T:avx2
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

try.c: /usr/bin/ld: warning: KeccakP-1600-AVX2.o: missing .note.GNU-stack section implies executable stack
try.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker
try.c: /usr/bin/ld: warning: KeccakP-1600-AVX2.o: missing .note.GNU-stack section implies executable stack
try.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker
measure.c: /usr/bin/ld: warning: KeccakP-1600-AVX2.o: missing .note.GNU-stack section implies executable stack
measure.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker

Number of similar (compiler,implementation) pairs: 17, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt

Compiler output

Implementation: T:avx2
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

a_fixed.c: In file included from a_fixed.c:10:
a_fixed.c: In file included from ./a_fixed.h:13:
a_fixed.c: ./r5_parameter_sets.h:142:2: warning: AVX2 not supported by platform [-W#warnings]
a_fixed.c: #warning AVX2 not supported by platform
a_fixed.c: ^
a_fixed.c: 1 warning generated.
a_random.c: In file included from a_random.c:10:
a_random.c: In file included from ./a_random.h:13:
a_random.c: ./r5_parameter_sets.h:142:2: warning: AVX2 not supported by platform [-W#warnings]
a_random.c: #warning AVX2 not supported by platform
a_random.c: ^
a_random.c: 1 warning generated.
cca_encrypt.c: In file included from cca_encrypt.c:11:
cca_encrypt.c: In file included from ./cca_encrypt.h:14:
cca_encrypt.c: ./r5_parameter_sets.h:142:2: warning: AVX2 not supported by platform [-W#warnings]
cca_encrypt.c: #warning AVX2 not supported by platform
cca_encrypt.c: ^
cca_encrypt.c: 1 warning generated.
cpa_kem.c: In file included from cpa_kem.c:12:
cpa_kem.c: In file included from ./cpa_kem.h:13:
cpa_kem.c: ./r5_parameter_sets.h:142:2: warning: AVX2 not supported by platform [-W#warnings]
cpa_kem.c: #warning AVX2 not supported by platform
cpa_kem.c: ^
cpa_kem.c: 1 warning generated.
drbg.c: In file included from drbg.c:18:
drbg.c: In file included from ./drbg.h:13:
drbg.c: ./r5_parameter_sets.h:142:2: warning: AVX2 not supported by platform [-W#warnings]
drbg.c: #warning AVX2 not supported by platform
drbg.c: ^
drbg.c: 1 warning generated.
matmul.c: In file included from matmul.c:8:
matmul.c: In file included from ./matmul.h:8:
matmul.c: ./r5_parameter_sets.h:142:2: warning: AVX2 not supported by platform [-W#warnings]
matmul.c: #warning AVX2 not supported by platform
matmul.c: ^
matmul.c: 1 warning generated.
matmul_avx2.c: In file included from matmul_avx2.c:8:
matmul_avx2.c: In file included from ./matmul.h:8:
matmul_avx2.c: ./r5_parameter_sets.h:142:2: warning: AVX2 not supported by platform [-W#warnings]
matmul_avx2.c: #warning AVX2 not supported by platform
matmul_avx2.c: ^
matmul_avx2.c: 1 warning generated.
matmul_cm.c: In file included from matmul_cm.c:7:
matmul_cm.c: In file included from ./matmul.h:8:
matmul_cm.c: ./r5_parameter_sets.h:142:2: warning: AVX2 not supported by platform [-W#warnings]
matmul_cm.c: #warning AVX2 not supported by platform
matmul_cm.c: ^
matmul_cm.c: 1 warning generated.
probe_cm.c: In file included from probe_cm.c:6:
probe_cm.c: ./r5_parameter_sets.h:142:2: warning: AVX2 not supported by platform [-W#warnings]
probe_cm.c: #warning AVX2 not supported by platform
probe_cm.c: ^
probe_cm.c: 1 warning generated.
r5_cca_kem.c: In file included from r5_cca_kem.c:7:
r5_cca_kem.c: ./r5_parameter_sets.h:142:2: warning: AVX2 not supported by platform [-W#warnings]
r5_cca_kem.c: #warning AVX2 not supported by platform
r5_cca_kem.c: ^
r5_cca_kem.c: 1 warning generated.
r5_cca_pke.c: In file included from r5_cca_pke.c:12:
r5_cca_pke.c: ./r5_parameter_sets.h:142:2: warning: AVX2 not supported by platform [-W#warnings]
r5_cca_pke.c: #warning AVX2 not supported by platform
r5_cca_pke.c: ^
r5_cca_pke.c: 1 warning generated.
r5_cpa_kem.c: In file included from r5_cpa_kem.c:9:
r5_cpa_kem.c: ./r5_parameter_sets.h:142:2: warning: AVX2 not supported by platform [-W#warnings]
r5_cpa_kem.c: #warning AVX2 not supported by platform
r5_cpa_kem.c: ^
r5_cpa_kem.c: 1 warning generated.
r5_cpa_pke_n1.c: In file included from r5_cpa_pke_n1.c:6:
r5_cpa_pke_n1.c: ./r5_parameter_sets.h:142:2: warning: AVX2 not supported by platform [-W#warnings]
r5_cpa_pke_n1.c: #warning AVX2 not supported by platform
r5_cpa_pke_n1.c: ^
r5_cpa_pke_n1.c: 1 warning generated.
r5_cpa_pke_nd.c: In file included from r5_cpa_pke_nd.c:7:
r5_cpa_pke_nd.c: ./r5_parameter_sets.h:142:2: warning: AVX2 not supported by platform [-W#warnings]
r5_cpa_pke_nd.c: #warning AVX2 not supported by platform
r5_cpa_pke_nd.c: ^
r5_cpa_pke_nd.c: 1 warning generated.
r5_dem.c: In file included from r5_dem.c:11:
r5_dem.c: ./r5_parameter_sets.h:142:2: warning: AVX2 not supported by platform [-W#warnings]
r5_dem.c: #warning AVX2 not supported by platform
r5_dem.c: ^
r5_dem.c: 1 warning generated.
ringmul.c: In file included from ringmul.c:8:
ringmul.c: In file included from ./ringmul.h:9:
ringmul.c: ./r5_parameter_sets.h:142:2: warning: AVX2 not supported by platform [-W#warnings]
ringmul.c: #warning AVX2 not supported by platform
ringmul.c: ^
ringmul.c: 1 warning generated.
ringmul_cm.c: In file included from ringmul_cm.c:8:
ringmul_cm.c: In file included from ./ringmul.h:9:
ringmul_cm.c: ./r5_parameter_sets.h:142:2: warning: AVX2 not supported by platform [-W#warnings]
ringmul_cm.c: #warning AVX2 not supported by platform
ringmul_cm.c: ^
ringmul_cm.c: 1 warning generated.
try.c: /usr/bin/ld: warning: KeccakP-1600-AVX2.o: missing .note.GNU-stack section implies executable stack
try.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker
try.c: /usr/bin/ld: warning: KeccakP-1600-AVX2.o: missing .note.GNU-stack section implies executable stack
try.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker
measure.c: /usr/bin/ld: warning: KeccakP-1600-AVX2.o: missing .note.GNU-stack section implies executable stack
measure.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2

Compiler output

Implementation: T:ref
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

try.c: /usr/bin/ld: libcrypto_kem_r5n13kem0d.a(parameters.o):(.rodata+0x0): multiple definition of `r5_parameter_sets'; libcrypto_kem_r5n13kem0d.a(cpa_kem.o):(.rodata+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_r5n13kem0d.a(parameters.o):(.bss+0x40): multiple definition of `r5_parameter_set_names'; libcrypto_kem_r5n13kem0d.a(cpa_kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_r5n13kem0d.a(r5_cpa_kem.o):(.rodata+0x0): multiple definition of `r5_parameter_sets'; libcrypto_kem_r5n13kem0d.a(cpa_kem.o):(.rodata+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_r5n13kem0d.a(r5_cpa_kem.o):(.bss+0x0): multiple definition of `r5_parameter_set_names'; libcrypto_kem_r5n13kem0d.a(cpa_kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_r5n13kem0d.a(r5_cpa_pke.o):(.rodata+0x0): multiple definition of `r5_parameter_sets'; libcrypto_kem_r5n13kem0d.a(cpa_kem.o):(.rodata+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_r5n13kem0d.a(r5_cpa_pke.o):(.bss+0x0): multiple definition of `r5_parameter_set_names'; libcrypto_kem_r5n13kem0d.a(cpa_kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_r5n13kem0d.a(r5_core.o):(.rodata+0x0): multiple definition of `r5_parameter_sets'; libcrypto_kem_r5n13kem0d.a(cpa_kem.o):(.rodata+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_r5n13kem0d.a(r5_core.o):(.bss+0x0): multiple definition of `r5_parameter_set_names'; libcrypto_kem_r5n13kem0d.a(cpa_kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_r5n13kem0d.a(a_fixed.o):(.rodata+0x0): multiple definition of `r5_parameter_sets'; libcrypto_kem_r5n13kem0d.a(cpa_kem.o):(.rodata+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_r5n13kem0d.a(a_fixed.o):(.bss+0x10): multiple definition of `r5_parameter_set_names'; libcrypto_kem_r5n13kem0d.a(cpa_kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_r5n13kem0d.a(a_random.o):(.rodata+0x0): multiple definition of `r5_parameter_sets'; libcrypto_kem_r5n13kem0d.a(cpa_kem.o):(.rodata+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_r5n13kem0d.a(a_random.o):(.bss+0x0): multiple definition of `r5_parameter_set_names'; libcrypto_kem_r5n13kem0d.a(cpa_kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: warning: KeccakP-1600-AVX2.o: missing .note.GNU-stack section implies executable stack
try.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker
try.c: clang: error: linker command failed with exit code 1 (use -v to see invocation)

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref

Compiler output

Implementation: T:ref
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

try.c: /usr/bin/ld: libcrypto_kem_r5n13kem0d.a(parameters.o):(.bss+0x0): multiple definition of `r5_parameter_set_names'; libcrypto_kem_r5n13kem0d.a(cpa_kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_r5n13kem0d.a(parameters.o):(.rodata+0x60): multiple definition of `r5_parameter_sets'; libcrypto_kem_r5n13kem0d.a(cpa_kem.o):(.rodata+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_r5n13kem0d.a(r5_cpa_kem.o):(.bss+0x0): multiple definition of `r5_parameter_set_names'; libcrypto_kem_r5n13kem0d.a(cpa_kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_r5n13kem0d.a(r5_cpa_kem.o):(.rodata+0x0): multiple definition of `r5_parameter_sets'; libcrypto_kem_r5n13kem0d.a(cpa_kem.o):(.rodata+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_r5n13kem0d.a(r5_cpa_pke.o):(.bss+0x0): multiple definition of `r5_parameter_set_names'; libcrypto_kem_r5n13kem0d.a(cpa_kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_r5n13kem0d.a(r5_cpa_pke.o):(.rodata+0x0): multiple definition of `r5_parameter_sets'; libcrypto_kem_r5n13kem0d.a(cpa_kem.o):(.rodata+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_r5n13kem0d.a(r5_core.o):(.bss+0x0): multiple definition of `r5_parameter_set_names'; libcrypto_kem_r5n13kem0d.a(cpa_kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_r5n13kem0d.a(r5_core.o):(.rodata+0x20): multiple definition of `r5_parameter_sets'; libcrypto_kem_r5n13kem0d.a(cpa_kem.o):(.rodata+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_r5n13kem0d.a(a_fixed.o):(.bss+0x20): multiple definition of `r5_parameter_set_names'; libcrypto_kem_r5n13kem0d.a(cpa_kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_r5n13kem0d.a(a_fixed.o):(.rodata+0x0): multiple definition of `r5_parameter_sets'; libcrypto_kem_r5n13kem0d.a(cpa_kem.o):(.rodata+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_r5n13kem0d.a(a_random.o):(.bss+0x0): multiple definition of `r5_parameter_set_names'; libcrypto_kem_r5n13kem0d.a(cpa_kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_r5n13kem0d.a(a_random.o):(.rodata+0x0): multiple definition of `r5_parameter_sets'; libcrypto_kem_r5n13kem0d.a(cpa_kem.o):(.rodata+0x0): first defined here
try.c: /usr/bin/ld: warning: KeccakP-1600-AVX2.o: missing .note.GNU-stack section implies executable stack
try.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker
try.c: collect2: error: ld returned 1 exit status

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref