Implementation notes: amd64, gcc67, crypto_sign/falcon512tree

Computer: gcc67
Architecture: amd64
CPU ID: AuthenticAMD-00810f10-178bfbff
SUPERCOP version: 20210125
Operation: crypto_sign
Primitive: falcon512tree

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
594021	158041 0 0	178413 844 1736	`T:avx2`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210117	20210114
594862	158041 0 0	178413 844 1736	`T:avx2`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210117	20210114
609006	164807 0 0	186021 844 1736	`T:avx2`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210117	20210114
637902	80651 0 0	99711 836 1736	`T:avx2`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210117	20210114
639422	192183 0 0	214720 860 1768	`T:avx2`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210117	20210114
664042	88552 0 0	109352 860 1768	`T:avx2`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210117	20210114
667393	85587 0 0	106176 860 1768	`T:avx2`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210117	20210114
741853	74210 0 0	93808 852 1736	`T:avx2`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210117	20210114
893530	192509 0 0	215032 860 1768	`T:fpu`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210117	20210114
899980	160472 0 0	181681 836 1736	`T:fpu`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210117	20210114
906931	153954 0 0	174273 836 1736	`T:fpu`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210117	20210114
907860	153954 0 0	174273 836 1736	`T:fpu`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210117	20210114
949683	83066 0 0	103672 860 1768	`T:fpu`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210117	20210114
970685	85934 0 0	106776 860 1768	`T:fpu`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210117	20210114
987918	78389 0 0	97403 828 1736	`T:fpu`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210117	20210114
1024308	71413 0 0	91080 852 1736	`T:fpu`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210117	20210114
1026126	158956 0 0	178721 836 1736	`T:fpu`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210117	20210114
7793467	180741 0 0	203224 860 1768	`T:ref`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210117	20210114
7887887	93575 0 0	114488 860 1768	`T:ref`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210117	20210114
7896833	78123 0 0	97960 852 1736	`T:ref`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210117	20210114
7966399	91122 0 0	111840 860 1768	`T:ref`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210117	20210114
8061657	161664 0 0	181697 836 1736	`T:ref`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210117	20210114
8336349	155105 0 0	176561 836 1736	`T:ref`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210117	20210114
8358297	147163 0 0	167737 836 1736	`T:ref`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210117	20210114
8362777	147163 0 0	167737 836 1736	`T:ref`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210117	20210114
8495686	86120 0 0	105435 828 1736	`T:ref`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210117	20210114

Compiler output

Implementation: T:avx2
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

rng.c: fatal error: error in backend: Do not know how to split this operator's operand!
rng.c:
rng.c: clang: error: clang frontend command failed with exit code 70 (use -v to see invocation)
rng.c: clang version 3.8.1-24 (tags/RELEASE_381/final)
rng.c: Target: x86_64-pc-linux-gnu
rng.c: Thread model: posix
rng.c: InstalledDir: /usr/bin
rng.c: clang: note: diagnostic msg: PLEASE submit a bug report to http://llvm.org/bugs/ and include the crash backtrace, preprocessed source, and associated run script.
rng.c: clang: note: diagnostic msg:
rng.c: ********************
rng.c:
rng.c: PLEASE ATTACH THE FOLLOWING FILES TO THE BUG REPORT:
rng.c: Preprocessed source(s) and associated run script(s) are located at:
rng.c: clang: note: diagnostic msg: /tmp/rng-ef965f.c
rng.c: clang: note: diagnostic msg: /tmp/rng-ef965f.sh
rng.c: clang: note: diagnostic msg:
rng.c:
rng.c: ********************

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2

Namespace violations

Implementation: T:avx2
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

codec.o falcon512tree_avx2_comp_decode T
codec.o falcon512tree_avx2_comp_encode T
codec.o falcon512tree_avx2_max_FG_bits R
codec.o falcon512tree_avx2_max_fg_bits R
codec.o falcon512tree_avx2_max_sig_bits R
codec.o falcon512tree_avx2_modq_decode T
codec.o falcon512tree_avx2_modq_encode T
codec.o falcon512tree_avx2_trim_i16_decode T
codec.o falcon512tree_avx2_trim_i16_encode T
codec.o falcon512tree_avx2_trim_i8_decode T
codec.o falcon512tree_avx2_trim_i8_encode T
common.o falcon512tree_avx2_hash_to_point_ct T
common.o falcon512tree_avx2_hash_to_point_vartime T
common.o falcon512tree_avx2_is_short T
common.o falcon512tree_avx2_is_short_half T
fft.o falcon512tree_avx2_FFT T
fft.o falcon512tree_avx2_iFFT T
fft.o falcon512tree_avx2_poly_LDL_fft T
fft.o falcon512tree_avx2_poly_LDLmv_fft T
fft.o falcon512tree_avx2_poly_add T
fft.o falcon512tree_avx2_poly_add_muladj_fft T
fft.o falcon512tree_avx2_poly_adj_fft T
fft.o falcon512tree_avx2_poly_div_autoadj_fft T
fft.o falcon512tree_avx2_poly_div_fft T
fft.o falcon512tree_avx2_poly_invnorm2_fft T
fft.o falcon512tree_avx2_poly_merge_fft T
fft.o falcon512tree_avx2_poly_mul_autoadj_fft T
fft.o falcon512tree_avx2_poly_mul_fft T
fft.o falcon512tree_avx2_poly_muladj_fft T
fft.o falcon512tree_avx2_poly_mulconst T
fft.o falcon512tree_avx2_poly_mulselfadj_fft T
fft.o falcon512tree_avx2_poly_neg T
fft.o falcon512tree_avx2_poly_split_fft T
fft.o falcon512tree_avx2_poly_sub T
fpr.o falcon512tree_avx2_fpr_gm_tab R
fpr.o falcon512tree_avx2_fpr_p2_tab R
keygen.o falcon512tree_avx2_keygen T
rng.o falcon512tree_avx2_get_seed T
rng.o falcon512tree_avx2_prng_get_bytes T
rng.o falcon512tree_avx2_prng_init T
rng.o falcon512tree_avx2_prng_refill T
shake.o falcon512tree_avx2_i_shake256_extract T
shake.o falcon512tree_avx2_i_shake256_flip T
shake.o falcon512tree_avx2_i_shake256_init T
shake.o falcon512tree_avx2_i_shake256_inject T
sign.o falcon512tree_avx2_expand_privkey T
sign.o falcon512tree_avx2_gaussian0_sampler T
sign.o falcon512tree_avx2_sampler T
sign.o falcon512tree_avx2_sign_dyn T
sign.o falcon512tree_avx2_sign_tree T
vrfy.o falcon512tree_avx2_complete_private T
vrfy.o falcon512tree_avx2_compute_public T
vrfy.o falcon512tree_avx2_count_nttzero T
vrfy.o falcon512tree_avx2_is_invertible T
vrfy.o falcon512tree_avx2_to_ntt_monty T
vrfy.o falcon512tree_avx2_verify_raw T
vrfy.o falcon512tree_avx2_verify_recover T

Number of similar (compiler,implementation) pairs: 8, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2

Namespace violations

Implementation: T:fpu
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

codec.o falcon512tree_fpu_comp_decode T
codec.o falcon512tree_fpu_comp_encode T
codec.o falcon512tree_fpu_max_FG_bits R
codec.o falcon512tree_fpu_max_fg_bits R
codec.o falcon512tree_fpu_max_sig_bits R
codec.o falcon512tree_fpu_modq_decode T
codec.o falcon512tree_fpu_modq_encode T
codec.o falcon512tree_fpu_trim_i16_decode T
codec.o falcon512tree_fpu_trim_i16_encode T
codec.o falcon512tree_fpu_trim_i8_decode T
codec.o falcon512tree_fpu_trim_i8_encode T
common.o falcon512tree_fpu_hash_to_point_ct T
common.o falcon512tree_fpu_hash_to_point_vartime T
common.o falcon512tree_fpu_is_short T
common.o falcon512tree_fpu_is_short_half T
fft.o falcon512tree_fpu_FFT T
fft.o falcon512tree_fpu_iFFT T
fft.o falcon512tree_fpu_poly_LDL_fft T
fft.o falcon512tree_fpu_poly_LDLmv_fft T
fft.o falcon512tree_fpu_poly_add T
fft.o falcon512tree_fpu_poly_add_muladj_fft T
fft.o falcon512tree_fpu_poly_adj_fft T
fft.o falcon512tree_fpu_poly_div_autoadj_fft T
fft.o falcon512tree_fpu_poly_div_fft T
fft.o falcon512tree_fpu_poly_invnorm2_fft T
fft.o falcon512tree_fpu_poly_merge_fft T
fft.o falcon512tree_fpu_poly_mul_autoadj_fft T
fft.o falcon512tree_fpu_poly_mul_fft T
fft.o falcon512tree_fpu_poly_muladj_fft T
fft.o falcon512tree_fpu_poly_mulconst T
fft.o falcon512tree_fpu_poly_mulselfadj_fft T
fft.o falcon512tree_fpu_poly_neg T
fft.o falcon512tree_fpu_poly_split_fft T
fft.o falcon512tree_fpu_poly_sub T
fpr.o falcon512tree_fpu_fpr_gm_tab R
fpr.o falcon512tree_fpu_fpr_p2_tab R
keygen.o falcon512tree_fpu_keygen T
rng.o falcon512tree_fpu_get_seed T
rng.o falcon512tree_fpu_prng_get_bytes T
rng.o falcon512tree_fpu_prng_init T
rng.o falcon512tree_fpu_prng_refill T
shake.o falcon512tree_fpu_i_shake256_extract T
shake.o falcon512tree_fpu_i_shake256_flip T
shake.o falcon512tree_fpu_i_shake256_init T
shake.o falcon512tree_fpu_i_shake256_inject T
sign.o falcon512tree_fpu_expand_privkey T
sign.o falcon512tree_fpu_gaussian0_sampler T
sign.o falcon512tree_fpu_sampler T
sign.o falcon512tree_fpu_sign_dyn T
sign.o falcon512tree_fpu_sign_tree T
vrfy.o falcon512tree_fpu_complete_private T
vrfy.o falcon512tree_fpu_compute_public T
vrfy.o falcon512tree_fpu_count_nttzero T
vrfy.o falcon512tree_fpu_is_invertible T
vrfy.o falcon512tree_fpu_to_ntt_monty T
vrfy.o falcon512tree_fpu_verify_raw T
vrfy.o falcon512tree_fpu_verify_recover T

Number of similar (compiler,implementation) pairs: 9, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:fpu
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:fpu
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:fpu
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:fpu
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:fpu
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:fpu
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:fpu
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:fpu
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:fpu

Namespace violations

Implementation: T:ref
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

codec.o falcon512tree_ref_comp_decode T
codec.o falcon512tree_ref_comp_encode T
codec.o falcon512tree_ref_max_FG_bits R
codec.o falcon512tree_ref_max_fg_bits R
codec.o falcon512tree_ref_max_sig_bits R
codec.o falcon512tree_ref_modq_decode T
codec.o falcon512tree_ref_modq_encode T
codec.o falcon512tree_ref_trim_i16_decode T
codec.o falcon512tree_ref_trim_i16_encode T
codec.o falcon512tree_ref_trim_i8_decode T
codec.o falcon512tree_ref_trim_i8_encode T
common.o falcon512tree_ref_hash_to_point_ct T
common.o falcon512tree_ref_hash_to_point_vartime T
common.o falcon512tree_ref_is_short T
common.o falcon512tree_ref_is_short_half T
fft.o falcon512tree_ref_FFT T
fft.o falcon512tree_ref_iFFT T
fft.o falcon512tree_ref_poly_LDL_fft T
fft.o falcon512tree_ref_poly_LDLmv_fft T
fft.o falcon512tree_ref_poly_add T
fft.o falcon512tree_ref_poly_add_muladj_fft T
fft.o falcon512tree_ref_poly_adj_fft T
fft.o falcon512tree_ref_poly_div_autoadj_fft T
fft.o falcon512tree_ref_poly_div_fft T
fft.o falcon512tree_ref_poly_invnorm2_fft T
fft.o falcon512tree_ref_poly_merge_fft T
fft.o falcon512tree_ref_poly_mul_autoadj_fft T
fft.o falcon512tree_ref_poly_mul_fft T
fft.o falcon512tree_ref_poly_muladj_fft T
fft.o falcon512tree_ref_poly_mulconst T
fft.o falcon512tree_ref_poly_mulselfadj_fft T
fft.o falcon512tree_ref_poly_neg T
fft.o falcon512tree_ref_poly_split_fft T
fft.o falcon512tree_ref_poly_sub T
fpr.o falcon512tree_ref_fpr_add T
fpr.o falcon512tree_ref_fpr_div T
fpr.o falcon512tree_ref_fpr_expm_p63 T
fpr.o falcon512tree_ref_fpr_gm_tab R
fpr.o falcon512tree_ref_fpr_mul T
fpr.o falcon512tree_ref_fpr_p2_tab R
fpr.o falcon512tree_ref_fpr_scaled T
fpr.o falcon512tree_ref_fpr_sqrt T
keygen.o falcon512tree_ref_keygen T
rng.o falcon512tree_ref_get_seed T
rng.o falcon512tree_ref_prng_get_bytes T
rng.o falcon512tree_ref_prng_init T
rng.o falcon512tree_ref_prng_refill T
shake.o falcon512tree_ref_i_shake256_extract T
shake.o falcon512tree_ref_i_shake256_flip T
shake.o falcon512tree_ref_i_shake256_init T
shake.o falcon512tree_ref_i_shake256_inject T
sign.o falcon512tree_ref_expand_privkey T
sign.o falcon512tree_ref_gaussian0_sampler T
sign.o falcon512tree_ref_sampler T
sign.o falcon512tree_ref_sign_dyn T
sign.o falcon512tree_ref_sign_tree T
vrfy.o falcon512tree_ref_complete_private T
vrfy.o falcon512tree_ref_compute_public T
vrfy.o falcon512tree_ref_count_nttzero T
vrfy.o falcon512tree_ref_is_invertible T
vrfy.o falcon512tree_ref_to_ntt_monty T
vrfy.o falcon512tree_ref_verify_raw T
vrfy.o falcon512tree_ref_verify_recover T

Number of similar (compiler,implementation) pairs: 9, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref