Implementation notes: amd64, nucnuc, crypto_aead/aegis128l

Computer: nucnuc
Microarchitecture: amd64; Airmont (406c3)
Architecture: amd64
CPU ID: GenuineIntel-000406c3-bfebfbff
SUPERCOP version: 20240107
Operation: crypto_aead
Primitive: aegis128l

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
14429	5335 0 0	18750 804 1016	`T:aesnic`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231225	20231217
14640	4996 0 0	19014 804 1016	`T:aesnic`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231225	20231217
14692	12185 0 0	27320 812 1016	`T:aesnic`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231225	20231217
14692	12329 0 0	29112 812 1016	`T:aesnic`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231225	20231217
17113	3216 0 0	17206 804 1016	`T:aesnib`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231225	20231217
17369	7156 0 0	22264 812 1016	`T:aesnib`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231225	20231217
17369	7156 0 0	23912 812 1016	`T:aesnib`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231225	20231217
17559	5028 0 0	18414 804 1016	`T:aesnib`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231225	20231217
17971	6903 0 0	21984 812 1016	`T:aesnia`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231225	20231217
17971	6951 0 0	23680 812 1016	`T:aesnia`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231225	20231217
18107	4817 0 0	18182 804 1016	`T:aesnia`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231225	20231217
18210	10422 0 0	26120 780 1080	`T:aesnic`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231225	20231217
18461	7051 0 0	21600 780 1080	`T:aesnic`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231225	20231217
18701	6118 0 0	20223 772 1080	`T:aesnic`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231225	20231217
18744	4427 0 0	18519 772 1080	`T:aesnib`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231225	20231217
18800	4344 0 0	17275 756 1048	`T:aesnic`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231225	20231217
19062	8267 0 0	23944 780 1080	`T:aesnib`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231225	20231217
19919	5102 0 0	19167 772 1080	`T:aesnia`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231225	20231217
20487	4520 0 0	19032 780 1080	`T:aesnib`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231225	20231217
20494	8037 0 0	23696 780 1080	`T:aesnia`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231225	20231217
20900	5270 0 0	19776 780 1080	`T:aesnia`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231225	20231217
20908	2814 0 0	15715 756 1048	`T:aesnib`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231225	20231217
112733	7319 4096 0	23016 4884 1080	`T:ref`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231225	20231217
1955151	8259 0 0	30664 812 1016	`T:sodium-softaes`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231225	20231217
2053775	8387 0 0	31344 812 1016	`T:sodium-softaes`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231225	20231217
2053783	8387 0 0	29696 812 1016	`T:sodium-softaes`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231225	20231217
2116187	11054 1024 0	33112 1812 1080	`T:sodium-softaes`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231225	20231217
3137345	6247 0 0	25878 804 1016	`T:sodium-softaes`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231225	20231217
3149345	8494 1024 0	29400 1812 1080	`T:sodium-softaes`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231225	20231217
3177645	4199 1024 0	23147 1788 1048	`T:sodium-softaes`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231225	20231217
3180851	9333 1024 0	29760 1812 1080	`T:sodium-softaes`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231225	20231217
3262198	6597 0 0	26758 804 1016	`T:sodium-softaes`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231225	20231217

Test failure

Implementation: jasmin-aesni
Security model: constbranchindex
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

error 111

Number of similar (compiler,implementation) pairs: 18, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	jasmin-aesni
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	jasmin-aesni
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	jasmin-aesni
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	jasmin-aesni
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	jasmin-aesni
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	jasmin-aesni
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	jasmin-aesni
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	jasmin-aesni
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	jasmin-aesni
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	sodium-aesni
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	sodium-aesni
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	sodium-aesni
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	sodium-aesni
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	sodium-aesni
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	sodium-aesni
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	sodium-aesni
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	sodium-aesni
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	sodium-aesni

Compiler output

Implementation: T:aesnia
Security model: timingleaks
Compiler: clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(encrypt.o): in function `crypto_aead_aegis128l_aesnia_timingleaks_encrypt':
try.c: encrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: encrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: encrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: encrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(encrypt.o): in function `crypto_aead_aegis128l_aesnia_timingleaks_decrypt':
try.c: encrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(encrypt.o):encrypt.c:(.text+0x...): more undefined references to `aegis128L_enc_aut_step' follow
try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(encrypt.o): in function `crypto_aead_aegis128l_aesnia_timingleaks_decrypt':
try.c: encrypt.c:(.text+0x...): undefined reference to `aegis128L_dec_aut_step'
try.c: /usr/bin/ld: encrypt.c:(.text+0x...): undefined reference to `aegis128L_dec_aut_step'
try.c: clang: error: linker command failed with exit code 1 (use -v to see invocation)

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:aesnia

Compiler output

Implementation: T:aesnia
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

encrypt.c: encrypt.c:34:25: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'aegis128L_initialization' that is compiled without support for 'aes'
encrypt.c: state[7] = _mm_aesenc_si128(state[6],state[7]);
encrypt.c: ^
encrypt.c: encrypt.c:35:25: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'aegis128L_initialization' that is compiled without support for 'aes'
encrypt.c: state[6] = _mm_aesenc_si128(state[5],state[6]);
encrypt.c: ^
encrypt.c: encrypt.c:36:25: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'aegis128L_initialization' that is compiled without support for 'aes'
encrypt.c: state[5] = _mm_aesenc_si128(state[4],state[5]);
encrypt.c: ^
encrypt.c: encrypt.c:37:25: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'aegis128L_initialization' that is compiled without support for 'aes'
encrypt.c: state[4] = _mm_aesenc_si128(state[3],state[4]);
encrypt.c: ^
encrypt.c: encrypt.c:38:25: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'aegis128L_initialization' that is compiled without support for 'aes'
encrypt.c: state[3] = _mm_aesenc_si128(state[2],state[3]);
encrypt.c: ^
encrypt.c: encrypt.c:39:25: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'aegis128L_initialization' that is compiled without support for 'aes'
encrypt.c: state[2] = _mm_aesenc_si128(state[1],state[2]);
encrypt.c: ^
encrypt.c: encrypt.c:40:25: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'aegis128L_initialization' that is compiled without support for 'aes'
encrypt.c: state[1] = _mm_aesenc_si128(state[0],state[1]);
encrypt.c: ^
encrypt.c: encrypt.c:41:25: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'aegis128L_initialization' that is compiled without support for 'aes'
encrypt.c: state[0] = _mm_aesenc_si128(tmp,state[0]);
encrypt.c: ^
encrypt.c: 8 errors generated.

Number of similar (compiler,implementation) pairs: 3, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:aesnia T:aesnib T:aesnic

Compiler output

Implementation: T:aesnia
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:aesnia

Compiler output

Implementation: T:ref
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(ecrypt.o): in function `crypto_aead_aegis128l_ref_timingleaks_encrypt':
try.c: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(ecrypt.o): in function `crypto_aead_aegis128l_ref_timingleaks_decrypt':
try.c: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(ecrypt.o):ecrypt.c:(.text+0x...): more undefined references to `aegis128L_enc_aut_step' follow
try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(ecrypt.o): in function `crypto_aead_aegis128l_ref_timingleaks_decrypt':
try.c: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_dec_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_dec_aut_step'
try.c: clang: error: linker command failed with exit code 1 (use -v to see invocation)

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref

Compiler output

Implementation: T:ref
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(ecrypt.o): in function `crypto_aead_aegis128l_ref_timingleaks_encrypt':
try.c: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(ecrypt.o):ecrypt.c:(.text+0x...): more undefined references to `aegis128L_enc_aut_step' follow
try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(ecrypt.o): in function `crypto_aead_aegis128l_ref_timingleaks_decrypt':
try.c: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_dec_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_dec_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: collect2: error: ld returned 1 exit status

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref

Compiler output

Implementation: T:ref
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE

try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(ecrypt.o): in function `crypto_aead_aegis128l_ref_timingleaks_encrypt':
try.c: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(ecrypt.o): in function `crypto_aead_aegis128l_ref_timingleaks_decrypt':
try.c: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_dec_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_dec_aut_step'
try.c: collect2: error: ld returned 1 exit status

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref

Compiler output

Implementation: T:ref
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref