Implementation notes: amd64, h9trinity, crypto_sign/ed448goldilocks

Computer: h9trinity
Architecture: amd64
CPU ID: AuthenticAMD-00610f01-178bfbff
SUPERCOP version: 20200618
Operation: crypto_sign
Primitive: ed448goldilocks

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
1773615	71316 24 21924	90547 912 23552	`amd64`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20200414	20200409
2050680	98176 24 21924	117635 912 23552	`64`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20200414	20200409
6209997	82031 24 18852	101083 912 20480	`32`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20200414	20200409

Compiler output

Implementation: 32
Security model: unknown
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

Number of similar (compiler,implementation) pairs: 12, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	32
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	32
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	32
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	32
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	64
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	64
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	64
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	64
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	amd64
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	amd64
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	amd64
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	amd64

Compiler output

Implementation: 32
Security model: unknown
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	32

Compiler output

Implementation: 32
Security model: unknown
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

barrett_field.c: In file included from /usr/include/endian.h:21:0,
barrett_field.c: from word.h:17,
barrett_field.c: from barrett_field.h:15,
barrett_field.c: from barrett_field.c:5:
barrett_field.c: /usr/include/features.h:184:3: warning: #warning "_BSD_SOURCE and _SVID_SOURCE are deprecated, use _DEFAULT_SOURCE" [-Wcpp]
barrett_field.c: # warning "_BSD_SOURCE and _SVID_SOURCE are deprecated, use _DEFAULT_SOURCE"
barrett_field.c: ^~~~~~~
crandom.c: intrinsics.h: Assembler messages:
crandom.c: intrinsics.h:176: Error: operand type mismatch for `vprotd'
crandom.c: intrinsics.h:176: Error: operand type mismatch for `vprotd'
crandom.c: intrinsics.h:176: Error: operand type mismatch for `vprotd'
crandom.c: intrinsics.h:176: Error: operand type mismatch for `vprotd'
crandom.c: intrinsics.h:176: Error: operand type mismatch for `vprotd'
crandom.c: intrinsics.h:176: Error: operand type mismatch for `vprotd'
crandom.c: intrinsics.h:176: Error: operand type mismatch for `vprotd'
crandom.c: intrinsics.h:176: Error: operand type mismatch for `vprotd'
crandom.c: intrinsics.h:176: Error: operand type mismatch for `vprotd'
crandom.c: intrinsics.h:176: Error: operand type mismatch for `vprotd'
crandom.c: intrinsics.h:176: Error: operand type mismatch for `vprotd'
crandom.c: intrinsics.h:176: Error: operand type mismatch for `vprotd'
crandom.c: intrinsics.h:176: Error: operand type mismatch for `vprotd'
crandom.c: intrinsics.h:176: Error: operand type mismatch for `vprotd'
crandom.c: intrinsics.h:176: Error: operand type mismatch for `vprotd'
crandom.c: intrinsics.h:176: Error: operand type mismatch for `vprotd'

Number of similar (compiler,implementation) pairs: 9, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	32
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	32
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	32
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	64
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	64
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	64
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	amd64
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	amd64
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	amd64

Compiler output

Implementation: 32
Security model: unknown
Compiler: gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE

Number of similar (compiler,implementation) pairs: 3, namely:

Compiler	Implementations
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	32 64 amd64

Compiler output

Implementation: 64
Security model: unknown
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

Number of similar (compiler,implementation) pairs: 2, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	64 amd64

Compiler output

Implementation: neon
Security model: unknown
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	neon
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	neon
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	neon
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	neon

Compiler output

Implementation: neon
Security model: unknown
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

barrett_field.c: In file included from barrett_field.c:5:
barrett_field.c: In file included from ./barrett_field.h:15:
barrett_field.c: In file included from ./word.h:17:
barrett_field.c: In file included from /usr/include/endian.h:21:
barrett_field.c: /usr/include/features.h:184:3: warning: "_BSD_SOURCE and _SVID_SOURCE are deprecated, use _DEFAULT_SOURCE" [-W#warnings]
barrett_field.c: # warning "_BSD_SOURCE and _SVID_SOURCE are deprecated, use _DEFAULT_SOURCE"
barrett_field.c: ^
barrett_field.c: 1 warning generated.
crandom.c: In file included from crandom.c:11:
crandom.c: In file included from ./magic.h:15:
crandom.c: ./p448.h:314:14: warning: implicit declaration of function 'vshr_n_u32' is invalid in C99 [-Wimplicit-function-declaration]
crandom.c: tmp = vshr_n_u32(aa[7],28);
crandom.c: ^
crandom.c: ./p448.h:318:17: warning: implicit declaration of function 'vsra_n_u32' is invalid in C99 [-Wimplicit-function-declaration]
crandom.c: aa[i] = vsra_n_u32(aa[i] & vmask, aa[i-1], 28);
crandom.c: ^
crandom.c: ./p448.h:320:31: warning: implicit declaration of function 'vrev64_u32' is invalid in C99 [-Wimplicit-function-declaration]
crandom.c: aa[0] = (aa[0] & vmask) + vrev64_u32(tmp) + (tmp&vm2);
crandom.c: ^
crandom.c: 3 warnings generated.
ec_point.c: In file included from ec_point.c:12:
ec_point.c: In file included from ./ec_point.h:13:
ec_point.c: In file included from ./p448.h:7:
ec_point.c: In file included from ./word.h:17:
ec_point.c: In file included from /usr/include/endian.h:21:
ec_point.c: /usr/include/features.h:184:3: warning: "_BSD_SOURCE and _SVID_SOURCE are deprecated, use _DEFAULT_SOURCE" [-W#warnings]
ec_point.c: # warning "_BSD_SOURCE and _SVID_SOURCE are deprecated, use _DEFAULT_SOURCE"
ec_point.c: ^
ec_point.c: In file included from ec_point.c:12:
ec_point.c: In file included from ./ec_point.h:13:
ec_point.c: ./p448.h:314:14: warning: implicit declaration of function 'vshr_n_u32' is invalid in C99 [-Wimplicit-function-declaration]
ec_point.c: tmp = vshr_n_u32(aa[7],28);
ec_point.c: ^
ec_point.c: ./p448.h:318:17: warning: implicit declaration of function 'vsra_n_u32' is invalid in C99 [-Wimplicit-function-declaration]
ec_point.c: aa[i] = vsra_n_u32(aa[i] & vmask, aa[i-1], 28);
ec_point.c: ^
ec_point.c: ./p448.h:320:31: warning: implicit declaration of function 'vrev64_u32' is invalid in C99 [-Wimplicit-function-declaration]
ec_point.c: aa[0] = (aa[0] & vmask) + vrev64_u32(tmp) + (tmp&vm2);
ec_point.c: ^
ec_point.c: 4 warnings generated.
goldilocks.c: In file included from goldilocks.c:6:
goldilocks.c: In file included from ./word.h:17:
goldilocks.c: In file included from /usr/include/endian.h:21:
goldilocks.c: /usr/include/features.h:184:3: warning: "_BSD_SOURCE and _SVID_SOURCE are deprecated, use _DEFAULT_SOURCE" [-W#warnings]
goldilocks.c: # warning "_BSD_SOURCE and _SVID_SOURCE are deprecated, use _DEFAULT_SOURCE"
goldilocks.c: ^
goldilocks.c: In file included from goldilocks.c:15:
goldilocks.c: In file included from ./ec_point.h:13:
goldilocks.c: ./p448.h:314:14: warning: implicit declaration of function 'vshr_n_u32' is invalid in C99 [-Wimplicit-function-declaration]
goldilocks.c: tmp = vshr_n_u32(aa[7],28);
goldilocks.c: ^
goldilocks.c: ./p448.h:318:17: warning: implicit declaration of function 'vsra_n_u32' is invalid in C99 [-Wimplicit-function-declaration]
goldilocks.c: aa[i] = vsra_n_u32(aa[i] & vmask, aa[i-1], 28);
goldilocks.c: ^
goldilocks.c: ./p448.h:320:31: warning: implicit declaration of function 'vrev64_u32' is invalid in C99 [-Wimplicit-function-declaration]
goldilocks.c: aa[0] = (aa[0] & vmask) + vrev64_u32(tmp) + (tmp&vm2);
goldilocks.c: ^
goldilocks.c: 4 warnings generated.
magic.c: In file included from magic.c:5:
magic.c: In file included from ./field.h:11:
magic.c: In file included from ./magic.h:14:
magic.c: In file included from ./word.h:17:
magic.c: In file included from /usr/include/endian.h:21:
magic.c: /usr/include/features.h:184:3: warning: "_BSD_SOURCE and _SVID_SOURCE are deprecated, use _DEFAULT_SOURCE" [-W#warnings]
magic.c: # warning "_BSD_SOURCE and _SVID_SOURCE are deprecated, use _DEFAULT_SOURCE"
magic.c: ^
magic.c: In file included from magic.c:5:
magic.c: In file included from ./field.h:11:
magic.c: In file included from ./magic.h:15:
magic.c: ./p448.h:314:14: warning: implicit declaration of function 'vshr_n_u32' is invalid in C99 [-Wimplicit-function-declaration]
magic.c: tmp = vshr_n_u32(aa[7],28);
magic.c: ^
magic.c: ./p448.h:318:17: warning: implicit declaration of function 'vsra_n_u32' is invalid in C99 [-Wimplicit-function-declaration]
magic.c: aa[i] = vsra_n_u32(aa[i] & vmask, aa[i-1], 28);
magic.c: ^
magic.c: ./p448.h:320:31: warning: implicit declaration of function 'vrev64_u32' is invalid in C99 [-Wimplicit-function-declaration]
magic.c: aa[0] = (aa[0] & vmask) + vrev64_u32(tmp) + (tmp&vm2);
magic.c: ^
magic.c: 4 warnings generated.
p448.c: In file included from p448.c:5:
p448.c: In file included from ./word.h:17:
p448.c: In file included from /usr/include/endian.h:21:
p448.c: /usr/include/features.h:184:3: warning: "_BSD_SOURCE and _SVID_SOURCE are deprecated, use _DEFAULT_SOURCE" [-W#warnings]
p448.c: # warning "_BSD_SOURCE and _SVID_SOURCE are deprecated, use _DEFAULT_SOURCE"
p448.c: ^
p448.c: In file included from p448.c:6:
p448.c: ./p448.h:314:14: warning: implicit declaration of function 'vshr_n_u32' is invalid in C99 [-Wimplicit-function-declaration]
p448.c: tmp = vshr_n_u32(aa[7],28);
p448.c: ^
p448.c: ./p448.h:318:17: warning: implicit declaration of function 'vsra_n_u32' is invalid in C99 [-Wimplicit-function-declaration]
p448.c: aa[i] = vsra_n_u32(aa[i] & vmask, aa[i-1], 28);
p448.c: ^
p448.c: ./p448.h:320:31: warning: implicit declaration of function 'vrev64_u32' is invalid in C99 [-Wimplicit-function-declaration]
p448.c: aa[0] = (aa[0] & vmask) + vrev64_u32(tmp) + (tmp&vm2);
p448.c: ^
p448.c: p448.c:19:36: error: invalid output constraint '+w' in asm
p448.c: __asm__ ("vadd.s64 %f0, %e0" : "+w"(x));
p448.c: ^
p448.c: p448.c:25:36: error: invalid output constraint '+w' in asm
p448.c: __asm__ ("vswp.s64 %e0, %f0" : "+w"(x));
p448.c: ^
p448.c: p448.c:31:36: error: invalid output constraint '+w' in asm
p448.c: __asm__ ("vswp.s64 %e0, %f0" : "+w"(x));
p448.c: ^
p448.c: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	neon

Compiler output

Implementation: neon
Security model: unknown
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

barrett_field.c: In file included from /usr/include/endian.h:21:0,
barrett_field.c: from word.h:17,
barrett_field.c: from barrett_field.h:15,
barrett_field.c: from barrett_field.c:5:
barrett_field.c: /usr/include/features.h:184:3: warning: #warning "_BSD_SOURCE and _SVID_SOURCE are deprecated, use _DEFAULT_SOURCE" [-Wcpp]
barrett_field.c: # warning "_BSD_SOURCE and _SVID_SOURCE are deprecated, use _DEFAULT_SOURCE"
barrett_field.c: ^~~~~~~
crandom.c: In file included from magic.h:15:0,
crandom.c: from crandom.c:11:
crandom.c: p448.h: In function 'p448_weak_reduce':
crandom.c: p448.h:314:14: warning: implicit declaration of function 'vshr_n_u32'; did you mean '__andn_u32'? [-Wimplicit-function-declaration]
crandom.c: tmp = vshr_n_u32(aa[7],28);
crandom.c: ^~~~~~~~~~
crandom.c: __andn_u32
crandom.c: p448.h:314:14: error: incompatible types when initializing type 'uint32x2_t {aka __vector(2) unsigned int}' using type 'int'
crandom.c: p448.h:318:17: warning: implicit declaration of function 'vsra_n_u32'; did you mean '__andn_u32'? [-Wimplicit-function-declaration]
crandom.c: aa[i] = vsra_n_u32(aa[i] & vmask, aa[i-1], 28);
crandom.c: ^~~~~~~~~~
crandom.c: __andn_u32
crandom.c: p448.h:318:15: error: incompatible types when assigning to type 'uint32x2_t {aka __vector(2) unsigned int}' from type 'int'
crandom.c: aa[i] = vsra_n_u32(aa[i] & vmask, aa[i-1], 28);
crandom.c: ^
crandom.c: p448.h:320:31: warning: implicit declaration of function 'vrev64_u32'; did you mean '_rdpid_u32'? [-Wimplicit-function-declaration]
crandom.c: aa[0] = (aa[0] & vmask) + vrev64_u32(tmp) + (tmp&vm2);
crandom.c: ^~~~~~~~~~
crandom.c: _rdpid_u32

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	neon
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	neon
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	neon
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	neon

Namespace violations

Implementation: 32
Security model: unknown
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

barrett_field.o add_nr_ext_packed T
barrett_field.o barrett_deserialize T
barrett_field.o barrett_deserialize_and_reduce T
barrett_field.o barrett_mul_or_mac T
barrett_field.o barrett_negate T
barrett_field.o barrett_reduce T
barrett_field.o barrett_serialize T
barrett_field.o sub_nr_ext_packed T
crandom.o crandom_destroy T
crandom.o crandom_detect_features T
crandom.o crandom_features B
crandom.o crandom_generate T
crandom.o crandom_init_from_buffer T
crandom.o crandom_init_from_file T
ec_point.o add_tw_niels_to_tw_extensible T
ec_point.o add_tw_pniels_to_tw_extensible T
ec_point.o convert_affine_to_extensible T
ec_point.o convert_tw_affine_to_tw_extensible T
ec_point.o convert_tw_affine_to_tw_pniels T
ec_point.o convert_tw_extensible_to_tw_pniels T
ec_point.o convert_tw_niels_to_tw_extensible T
ec_point.o convert_tw_pniels_to_tw_extensible T
ec_point.o deserialize_affine T
ec_point.o deserialize_and_twist_approx T
ec_point.o deserialize_montgomery T
ec_point.o double_extensible T
ec_point.o double_tw_extensible T
ec_point.o elligator_2s_inject T
ec_point.o eq_affine T
ec_point.o eq_extensible T
ec_point.o eq_tw_extensible T
ec_point.o is_even_pt T
ec_point.o is_even_tw T
ec_point.o is_square T
ec_point.o montgomery_step T
ec_point.o p448_inverse T
ec_point.o p448_isr T
ec_point.o serialize_extensible T
ec_point.o serialize_montgomery T
ec_point.o set_identity_affine T
ec_point.o set_identity_extensible T
ec_point.o set_identity_tw_extensible T
ec_point.o sub_tw_niels_from_tw_extensible T
ec_point.o sub_tw_pniels_from_tw_extensible T
ec_point.o test_only_twist T
ec_point.o twist_and_double T
ec_point.o twist_even T
ec_point.o untwist_and_double T
ec_point.o untwist_and_double_and_serialize T
ec_point.o validate_affine T
ec_point.o validate_extensible T
ec_point.o validate_tw_extensible T
goldilocks.o goldilocks_derive_private_key T
goldilocks.o goldilocks_destroy_precomputed_public_key T
goldilocks.o goldilocks_init T
goldilocks.o goldilocks_keygen T
goldilocks.o goldilocks_precompute_public_key T
goldilocks.o goldilocks_private_to_public T
goldilocks.o goldilocks_shared_secret T
goldilocks.o goldilocks_shared_secret_precomputed T
goldilocks.o goldilocks_sign T
goldilocks.o goldilocks_underive_private_key T
goldilocks.o goldilocks_verify T
goldilocks.o goldilocks_verify_precomputed T
magic.o SCALARMUL_FIXED_WINDOW_ADJUSTMENT R
magic.o curve_prime_order D
magic.o goldilocks_base_point R
magic.o sqrt_d_minus_1 R
p448.o p448_deserialize T
p448.o p448_is_zero T
p448.o p448_mul T
p448.o p448_mulw T
p448.o p448_serialize T
p448.o p448_sqr T
p448.o p448_strong_reduce T
p448.o simultaneous_invert_p448 T
scalarmul.o destroy_fixed_base T
scalarmul.o linear_combo_combs_vt T
scalarmul.o linear_combo_var_fixed_vt T
scalarmul.o montgomery_ladder T
scalarmul.o precompute_fixed_base T
scalarmul.o precompute_fixed_base_wnaf T
scalarmul.o scalarmul T
scalarmul.o scalarmul_fixed_base T
scalarmul.o scalarmul_fixed_base_wnaf_vt T
scalarmul.o scalarmul_vlook T
scalarmul.o scalarmul_vt T
sha512.o sha512_final T
sha512.o sha512_init T
sha512.o sha512_update T

Number of similar (compiler,implementation) pairs: 3, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	32 64 amd64