Implementation notes: amd64, hertz, crypto_aead/romulusm

Computer: hertz
Microarchitecture: amd64; Zen 4 (a60f12)
Architecture: amd64
CPU ID: AuthenticAMD-00a60f12-178bfbff
SUPERCOP version: 20240425
Operation: crypto_aead
Primitive: romulusm

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
270024	12046 0 0	33094 828 1096	`aadomn/x86`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240429	20240425
270189	12238 0 0	33398 828 1096	`aadomn/x86`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240429	20240425
270539	10390 0 0	25264 820 1096	`aadomn/x86`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240429	20240425
282676	12241 0 0	29397 804 1160	`aadomn/x86`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231220	20231217
282789	10569 0 0	24024 780 1064	`aadomn/x86`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231220	20231217
283061	11761 0 0	26917 804 1096	`aadomn/x86`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231220	20231217
875532	37715 640 0	58558 1572 1096	`aadomn/opt32`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240429	20240425
882283	35971 640 0	56670 1572 1096	`aadomn/opt32`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240429	20240425
1184552	32404 12 0	53526 840 1096	`T:ref`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240429	20240425
1189992	25742 12 0	46718 840 1096	`T:ref`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240429	20240425
1312737	30402 640 0	47669 1484 1160	`aadomn/opt32`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231220	20231217
1517346	24915 640 0	40197 1452 1096	`aadomn/opt32`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231220	20231217
1807495	19241 640 0	34152 1468 1096	`aadomn/opt32`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240429	20240425
2331347	20616 640 0	34160 1428 1064	`aadomn/opt32`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231220	20231217
3697647	9339 12 0	24581 816 1096	`T:ref`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231220	20231217
4250931	7616 12 0	22648 832 1096	`T:ref`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240429	20240425
4846382	5962 12 0	19488 792 1064	`T:ref`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231220	20231217

Test failure

Implementation: T:fixslice_opt32
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

error 111
crypto_aead_decrypt returns nonzero

Number of similar (compiler,implementation) pairs: 6, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:fixslice_opt32
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:fixslice_opt32
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:fixslice_opt32
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:fixslice_opt32
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:fixslice_opt32
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:fixslice_opt32

Test failure

Implementation: T:opt32t
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

error 111
crypto_aead_decrypt allows trivial forgeries

Number of similar (compiler,implementation) pairs: 6, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt32t
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt32t
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt32t
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt32t
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt32t
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt32t

Compiler output

Implementation: T:ref
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE

romulus_m_reference.c: In function 'pad',
romulus_m_reference.c: inlined from 'rho_ad' at romulus_m_reference.c:54:3:
romulus_m_reference.c: romulus_m_reference.c:23:13: warning: writing 32 bytes into a region of size 16 [-Wstringop-overflow=]
romulus_m_reference.c: 23 | mp[i] = m[i];
romulus_m_reference.c: | ~~~~~~^~~~~~
romulus_m_reference.c: romulus_m_reference.c: In function 'rho_ad':
romulus_m_reference.c: romulus_m_reference.c:51:17: note: destination object 'mp' of size 16
romulus_m_reference.c: 51 | unsigned char mp [16];
romulus_m_reference.c: | ^~
romulus_m_reference.c: In function 'pad',
romulus_m_reference.c: inlined from 'rho_ad' at romulus_m_reference.c:54:3:
romulus_m_reference.c: romulus_m_reference.c:23:13: warning: writing 32 bytes into a region of size 16 [-Wstringop-overflow=]
romulus_m_reference.c: 23 | mp[i] = m[i];
romulus_m_reference.c: | ~~~~~~^~~~~~
romulus_m_reference.c: romulus_m_reference.c: In function 'rho_ad':
romulus_m_reference.c: romulus_m_reference.c:51:17: note: destination object 'mp' of size 16
romulus_m_reference.c: 51 | unsigned char mp [16];
romulus_m_reference.c: | ^~
romulus_m_reference.c: In function 'pad',
romulus_m_reference.c: inlined from 'rho' at romulus_m_reference.c:70:3:
romulus_m_reference.c: romulus_m_reference.c:23:13: warning: writing 32 bytes into a region of size 16 [-Wstringop-overflow=]
romulus_m_reference.c: 23 | mp[i] = m[i];
romulus_m_reference.c: | ~~~~~~^~~~~~
romulus_m_reference.c: romulus_m_reference.c: In function 'rho':
romulus_m_reference.c: romulus_m_reference.c:68:17: note: destination object 'mp' of size 16
romulus_m_reference.c: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref