Implementation notes: amd64, hydra8, crypto_kem/ledakem54sl

Computer: hydra8
Architecture: amd64
CPU ID: GenuineIntel-000306a9-bfebfbff
SUPERCOP version: 20200906
Operation: crypto_kem
Primitive: ledakem54sl
TimeObject sizeTest sizeImplementationCompilerBenchmark dateSUPERCOP version
6515297253998 72 0146771 880 1624T:portableoptclang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE2020090320200826

Compiler output

Implementation: T:portableopt
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE
gf2x_arith.c: gf2x_arith.c:803:17: error: always_inline function '_mm256_xor_si256' requires target feature 'avx2', but would be inlined into function 'gf2x_exact_div_x_plus_one' that is compiled without support for 'avx2'
gf2x_arith.c: vec_t = _mm256_xor_si256(tmp,vec_t);
gf2x_arith.c: ^
gf2x_arith.c: gf2x_arith.c:806:15: error: always_inline function '_mm256_slli_epi64' requires target feature 'avx2', but would be inlined into function 'gf2x_exact_div_x_plus_one' that is compiled without support for 'avx2'
gf2x_arith.c: tmp = _mm256_slli_epi64(vec_t, j);
gf2x_arith.c: ^
gf2x_arith.c: gf2x_arith.c:807:21: error: always_inline function '_mm256_xor_si256' requires target feature 'avx2', but would be inlined into function 'gf2x_exact_div_x_plus_one' that is compiled without support for 'avx2'
gf2x_arith.c: vec_t = _mm256_xor_si256(tmp,vec_t);
gf2x_arith.c: ^
gf2x_arith.c: gf2x_arith.c:818:17: error: always_inline function '_mm256_xor_si256' requires target feature 'avx2', but would be inlined into function 'gf2x_exact_div_x_plus_one' that is compiled without support for 'avx2'
gf2x_arith.c: vec_t = _mm256_xor_si256(tmp,vec_t);
gf2x_arith.c: ^
gf2x_arith.c: gf2x_arith.c:824:17: error: always_inline function '_mm256_xor_si256' requires target feature 'avx2', but would be inlined into function 'gf2x_exact_div_x_plus_one' that is compiled without support for 'avx2'
gf2x_arith.c: vec_t = _mm256_xor_si256(tmp,vec_t);
gf2x_arith.c: ^
gf2x_arith.c: 5 errors generated.

Number of similar (compiler,implementation) pairs: 4, namely:
CompilerImplementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:portableopt
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:portableopt
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:portableopt
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:portableopt

Compiler output

Implementation: T:portableopt
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE
gf2x_arith.c: In file included from /usr/lib/gcc/x86_64-linux-gnu/7/include/immintrin.h:43:0,
gf2x_arith.c: from /usr/lib/gcc/x86_64-linux-gnu/7/include/x86intrin.h:48,
gf2x_arith.c: from architecture_detect.h:41,
gf2x_arith.c: from gf2x_arith.h:34,
gf2x_arith.c: from gf2x_arith.c:31:
gf2x_arith.c: gf2x_arith.c: In function 'gf2x_exact_div_x_plus_one':
gf2x_arith.c: /usr/lib/gcc/x86_64-linux-gnu/7/include/avx2intrin.h:913:1: error: inlining failed in call to always_inline '_mm256_xor_si256': target specific option mismatch
gf2x_arith.c: _mm256_xor_si256 (__m256i __A, __m256i __B)
gf2x_arith.c: ^~~~~~~~~~~~~~~~
gf2x_arith.c: gf2x_arith.c:803:15: note: called from here
gf2x_arith.c: vec_t = _mm256_xor_si256(tmp,vec_t);
gf2x_arith.c: ~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
gf2x_arith.c: In file included from /usr/lib/gcc/x86_64-linux-gnu/7/include/immintrin.h:43:0,
gf2x_arith.c: from /usr/lib/gcc/x86_64-linux-gnu/7/include/x86intrin.h:48,
gf2x_arith.c: from architecture_detect.h:41,
gf2x_arith.c: from gf2x_arith.h:34,
gf2x_arith.c: from gf2x_arith.c:31:
gf2x_arith.c: /usr/lib/gcc/x86_64-linux-gnu/7/include/avx2intrin.h:913:1: error: inlining failed in call to always_inline '_mm256_xor_si256': target specific option mismatch
gf2x_arith.c: _mm256_xor_si256 (__m256i __A, __m256i __B)
gf2x_arith.c: ^~~~~~~~~~~~~~~~
gf2x_arith.c: gf2x_arith.c:803:15: note: called from here
gf2x_arith.c: vec_t = _mm256_xor_si256(tmp,vec_t);
gf2x_arith.c: ~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
gf2x_arith.c: In file included from /usr/lib/gcc/x86_64-linux-gnu/7/include/immintrin.h:43:0,
gf2x_arith.c: from /usr/lib/gcc/x86_64-linux-gnu/7/include/x86intrin.h:48,
gf2x_arith.c: ...

Number of similar (compiler,implementation) pairs: 4, namely:
CompilerImplementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE T:portableopt
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE T:portableopt
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE T:portableopt
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE T:portableopt

Namespace violations

Implementation: T:portableopt
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE
H_Q_matrices_generation.o generateHPosOnes T
H_Q_matrices_generation.o transposeHPosOnes T
aes256.o rijndaelEncrypt T
aes256.o rijndaelKeySetupEnc T
bf_decoding.o bf_decoding_CT T
bf_decoding.o lift_mul_dense_to_sparse_CT T
bf_decoding.o thresholds D
dfr_test.o DFR_test T
djbsort.o int32_sort T
gf2x_arith.o gf2x_mul_Kar T
gf2x_arith.o gf2x_mul_TC3 T
gf2x_arith.o gf2x_mul_comb T
gf2x_arith_mod_xPplusOne.o gf2x_digit_times_poly_mul T
gf2x_arith_mod_xPplusOne.o gf2x_mod_fmac T
gf2x_arith_mod_xPplusOne.o gf2x_mod_inverse_KTT T
gf2x_arith_mod_xPplusOne.o gf2x_mod_mul T
gf2x_arith_mod_xPplusOne.o gf2x_mod_mul_dense_to_sparse T
gf2x_arith_mod_xPplusOne.o gf2x_mod_mul_monom T
gf2x_arith_mod_xPplusOne.o gf2x_transpose_in_place T
gf2x_arith_mod_xPplusOne.o rand_circulant_sparse_block T
gf2x_arith_mod_xPplusOne.o rand_error_pos T
gf2x_arith_mod_xPplusOne.o rand_error_pos_shake T
inverse_exp.o gf2x_mod_inverse_exp T
inverse_exp.o inverse_factors_table D
inverse_exp.o pow_2_A T
inverse_exp.o raise_2_i_clmul T
inverse_exp.o raise_2_i_factor_inverse_permute T
inverse_exp.o raise_2_i_hybrid T
niederreiter_decrypt.o decrypt_niederreiter_indcca2 T
niederreiter_encrypt.o encrypt_niederreiter_indcca2 T
niederreiter_keygen.o key_gen_niederreiter T
niederreiter_keygen.o privateKey_deletion_niederreiter T
niederreiter_keygen.o publicKey_deletion_niederreiter T
rng.o AES256_CTR_DRBG_Update T
rng.o AES256_ECB T
rng.o DRBG_ctx C
rng.o deterministic_random_byte_generator T
rng.o rand_range T
rng.o rand_range_shake T
rng.o seedexpander T
rng.o seedexpander_from_trng T
rng.o seedexpander_init T
rng.o shake_seedexpander_extract T
rng.o shake_seedexpander_init T

Number of similar (compiler,implementation) pairs: 1, namely:
CompilerImplementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:portableopt