Implementation notes: amd64, h6sandy, crypto_stream/simon64128ctr

Computer: h6sandy
Microarchitecture: amd64; Sandy Bridge (206a7)
Architecture: amd64
CPU ID: GenuineIntel-000206a7-bfebfbff
SUPERCOP version: 20240107
Operation: crypto_stream
Primitive: simon64128ctr

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
6067	90779 0 0	106149 804 1024	`T:sse4`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231213	20231212
6406	85596 0 0	99915 844 960	`T:sse4`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231213	20231212
6444	86316 0 0	102579 844 960	`T:sse4`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231213	20231212
9961	89385 0 0	101848 780 992	`T:sse4`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231213	20231212
10044	90067 0 0	104149 804 1024	`T:sse4`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231213	20231212
10076	85603 0 0	97869 836 960	`T:sse4`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231213	20231212
10093	90775 0 0	104468 796 1024	`T:sse4`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231213	20231212
10824	89916 0 0	102467 844 960	`T:sse4`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231213	20231212

Compiler output

Implementation: T:avx2
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

stream.c: stream.c:147:24: error: always_inline function '_mm256_add_epi32' requires target feature 'avx2', but would be inlined into function 'Encrypt' that is compiled without support for 'avx2'
stream.c: SET1(X[0],nonce[1]); SET8(Y[0],nonce[0]);
stream.c: ^
stream.c: ./Intrinsics_AVX2_64block.h:25:46: note: expanded from macro 'SET8'
stream.c: #define SET8(X,c) (X=SET(c,c,c,c,c,c,c,c), X=ADD(X,_q))
stream.c: ^
stream.c: ./Intrinsics_AVX2_64block.h:16:13: note: expanded from macro 'ADD'
stream.c: #define ADD _mm256_add_epi32
stream.c: ^
stream.c: stream.c:149:21: error: always_inline function '_mm256_slli_epi32' requires target feature 'avx2', but would be inlined into function 'Encrypt' that is compiled without support for 'avx2'
stream.c: if (numbytes==64) Enc(X,Y,rk,8);
stream.c: ^
stream.c: ./Simon64128AVX2.h:43:24: note: expanded from macro 'Enc'
stream.c: #define Enc(X,Y,rk,n) (R2x##n(X,Y,rk,0,1), R2x##n(X,Y,rk,2,3), R2x##n(X,Y,rk,4,5), R2x##n(X,Y,rk,6,7), R2x##n(X,Y,rk,8,9), \
stream.c: ^
stream.c: <scratch space>:221:1: note: expanded from here
stream.c: R2x8
stream.c: ^
stream.c: ./Simon64128AVX2.h:30:28: note: expanded from macro 'R2x8'
stream.c: #define R2x8(X,Y,rk,r,s) (Sx8(X,Y,rk[r][0]), Sx8(Y,X,rk[s][0]))
stream.c: ^
stream.c: note: (skipping 1 expansions in backtrace; use -fmacro-backtrace-limit=0 to see all)
stream.c: ./Simon64128AVX2.h:23:28: note: expanded from macro 'RD'
stream.c: #define RD(U,V,k) (V=XOR(V,ROL(U,2)), V=XOR(V,AND(ROL(U,1),ROL8(U))), V=XOR(V,k))
stream.c: ^
stream.c: ...

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2

Compiler output

Implementation: T:avx2
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

stream.c: stream.c:147:3: error: always_inline function '_mm256_set_epi32' requires target feature 'avx', but would be inlined into function 'Encrypt' that is compiled without support for 'avx'
stream.c: SET1(X[0],nonce[1]); SET8(Y[0],nonce[0]);
stream.c: ^
stream.c: ./Intrinsics_AVX2_64block.h:24:22: note: expanded from macro 'SET1'
stream.c: #define SET1(X,c) (X=SET(c,c,c,c,c,c,c,c))
stream.c: ^
stream.c: ./Intrinsics_AVX2_64block.h:23:13: note: expanded from macro 'SET'
stream.c: #define SET _mm256_set_epi32
stream.c: ^
stream.c: stream.c:147:3: error: AVX vector return of type '__m256i' (vector of 4 'long long' values) without 'avx' enabled changes the ABI
stream.c: ./Intrinsics_AVX2_64block.h:24:22: note: expanded from macro 'SET1'
stream.c: #define SET1(X,c) (X=SET(c,c,c,c,c,c,c,c))
stream.c: ^
stream.c: ./Intrinsics_AVX2_64block.h:23:13: note: expanded from macro 'SET'
stream.c: #define SET _mm256_set_epi32
stream.c: ^
stream.c: stream.c:147:24: error: always_inline function '_mm256_set_epi32' requires target feature 'avx', but would be inlined into function 'Encrypt' that is compiled without support for 'avx'
stream.c: SET1(X[0],nonce[1]); SET8(Y[0],nonce[0]);
stream.c: ^
stream.c: ./Intrinsics_AVX2_64block.h:25:22: note: expanded from macro 'SET8'
stream.c: #define SET8(X,c) (X=SET(c,c,c,c,c,c,c,c), X=ADD(X,_q))
stream.c: ^
stream.c: ./Intrinsics_AVX2_64block.h:23:13: note: expanded from macro 'SET'
stream.c: #define SET _mm256_set_epi32
stream.c: ^
stream.c: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2

Compiler output

Implementation: T:avx2
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

stream.c: In file included from /usr/lib/gcc/x86_64-linux-gnu/11/include/immintrin.h:47,
stream.c: from Intrinsics_AVX2_64block.h:5,
stream.c: from Simon64128AVX2.h:17,
stream.c: from stream.c:20:
stream.c: stream.c: In function 'Transpose':
stream.c: /usr/lib/gcc/x86_64-linux-gnu/11/include/avx2intrin.h:913:1: error: inlining failed in call to 'always_inline' '_mm256_xor_si256': target specific option mismatch
stream.c: 913 | _mm256_xor_si256 (__m256i __A, __m256i __B)
stream.c: | ^~~~~~~~~~~~~~~~
stream.c: In file included from Simon64128AVX2.h:17,
stream.c: from stream.c:20:
stream.c: Intrinsics_AVX2_64block.h:14:13: note: called from here
stream.c: 14 | #define XOR _mm256_xor_si256
stream.c: stream.c:460:10: note: in expansion of macro 'XOR'
stream.c: 460 | M[6] = XOR(M[6], W[3]);
stream.c: | ^~~
stream.c: In file included from /usr/lib/gcc/x86_64-linux-gnu/11/include/immintrin.h:47,
stream.c: from Intrinsics_AVX2_64block.h:5,
stream.c: from Simon64128AVX2.h:17,
stream.c: from stream.c:20:
stream.c: /usr/lib/gcc/x86_64-linux-gnu/11/include/avx2intrin.h:682:1: error: inlining failed in call to 'always_inline' '_mm256_slli_epi32': target specific option mismatch
stream.c: 682 | _mm256_slli_epi32 (__m256i __A, int __B)
stream.c: | ^~~~~~~~~~~~~~~~~
stream.c: In file included from Simon64128AVX2.h:17,
stream.c: from stream.c:20:
stream.c: Intrinsics_AVX2_64block.h:17:13: note: called from here
stream.c: ...

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2

Compiler output

Implementation: T:sse4
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

stream.c: stream.c:340:3: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'ExpandKeyBS' that is compiled without support for 'ssse3'
stream.c: EKBS(rk);
stream.c: ^
stream.c: ./Simon64128SSE4.h:64:19: note: expanded from macro 'EKBS'
stream.c: #define EKBS(rk) (RKBS(rk,4,_D), RKBS(rk,5,_D), RKBS(rk,6,_C), RKBS(rk,7,_D), RKBS(rk,8,_D), RKBS(rk,9,_C), RKBS(rk,10,_D), RKBS(rk,11,_D), \
stream.c: ^
stream.c: ./Simon64128SSE4.h:53:52: note: expanded from macro 'RKBS'
stream.c: #define RKBS(rk,r,_V) (rk[r][7]= _D ^ rk[r-4][7] ^ ROR8(rk[r-1][2]) ^ rk[r-3][7] ^ ROR8(rk[r-1][3]) ^ ROR8(rk[r-3][0]), \
stream.c: ^
stream.c: ./Intrinsics_SSE4_64block.h:39:19: note: expanded from macro 'ROR8'
stream.c: #define ROR8(X) (SHFL(X,R8))
stream.c: ^
stream.c: ./Intrinsics_SSE4_64block.h:34:14: note: expanded from macro 'SHFL'
stream.c: #define SHFL _mm_shuffle_epi8
stream.c: ^
stream.c: stream.c:340:3: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'ExpandKeyBS' that is compiled without support for 'ssse3'
stream.c: ./Simon64128SSE4.h:64:19: note: expanded from macro 'EKBS'
stream.c: #define EKBS(rk) (RKBS(rk,4,_D), RKBS(rk,5,_D), RKBS(rk,6,_C), RKBS(rk,7,_D), RKBS(rk,8,_D), RKBS(rk,9,_C), RKBS(rk,10,_D), RKBS(rk,11,_D), \
stream.c: ^
stream.c: ./Simon64128SSE4.h:53:85: note: expanded from macro 'RKBS'
stream.c: #define RKBS(rk,r,_V) (rk[r][7]= _D ^ rk[r-4][7] ^ ROR8(rk[r-1][2]) ^ rk[r-3][7] ^ ROR8(rk[r-1][3]) ^ ROR8(rk[r-3][0]), \
stream.c: ^
stream.c: ./Intrinsics_SSE4_64block.h:39:19: note: expanded from macro 'ROR8'
stream.c: #define ROR8(X) (SHFL(X,R8))
stream.c: ^
stream.c: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:sse4