Implementation notes: amd64, panther, crypto_aead/aegis128l

Computer: panther
Microarchitecture: amd64; Tiger Lake (806c1)
Architecture: amd64
CPU ID: GenuineIntel-000806c1-00-bfebfbff
SUPERCOP version: 20240107
Operation: crypto_aead
Primitive: aegis128l

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
1484	4620 0 0	27557 828 1048	`sodium-aesni`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231213	20231212
1489	3110 0 0	22787 820 1016	`sodium-aesni`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231213	20231212
1490	5635 0 0	22469 828 1048	`T:aesnia`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231213	20231212
1491	5651 0 0	22501 828 1048	`T:aesnia`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231213	20231212
1496	10209 0 0	27085 828 1048	`T:aesnic`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231213	20231212
1497	4620 0 0	27573 828 1048	`sodium-aesni`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231213	20231212
1506	4153 0 0	17731 820 1016	`T:aesnib`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231213	20231212
1507	10369 0 0	27261 828 1048	`T:aesnic`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231213	20231212
1508	5909 0 0	22781 828 1048	`T:aesnib`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231213	20231212
1511	5909 0 0	22765 828 1048	`T:aesnib`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231213	20231212
1516	3939 0 0	17499 820 1016	`T:aesnia`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231213	20231212
1528	4596 0 0	26933 828 1016	`sodium-aesni`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231213	20231212
1538	4965 0 0	28040 780 1080	`sodium-aesni`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231213	20231212
1539	4339 0 0	17939 820 1016	`T:aesnic`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231213	20231212
1587	4141 0 0	25136 780 1080	`sodium-aesni`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231213	20231212
1591	5729 0 0	22328 780 1080	`T:aesnia`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231213	20231212
1591	5984 0 0	22592 780 1080	`T:aesnib`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231213	20231212
1591	4127 0 0	17995 820 1016	`T:aesnic`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231213	20231212
1593	7678 0 0	24304 780 1080	`T:aesnic`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231213	20231212
1604	2780 0 0	16635 820 1016	`T:aesnib`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231213	20231212
1617	4311 32 0	27197 868 1048	`jasmin-aesni`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231222	20231222
1618	4256 32 0	23851 860 1016	`jasmin-aesni`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231222	20231222
1620	4311 32 0	26589 868 1016	`jasmin-aesni`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231222	20231222
1622	4315 32 0	25176 820 1080	`jasmin-aesni`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231222	20231222
1625	4315 32 0	27296 820 1080	`jasmin-aesni`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231222	20231222
1626	4311 32 0	27197 868 1048	`jasmin-aesni`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231222	20231222
1632	4229 32 0	24543 812 1080	`jasmin-aesni`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231222	20231222
1633	4207 32 0	22963 796 1048	`jasmin-aesni`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231222	20231222
1634	5651 0 0	20200 780 1080	`T:aesnic`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231213	20231212
1644	3918 0 0	18440 780 1080	`T:aesnib`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231213	20231212
1645	4979 0 0	19055 772 1080	`T:aesnic`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231213	20231212
1663	4482 0 0	18992 780 1080	`T:aesnia`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231213	20231212
1682	4241 0 0	18287 772 1080	`T:aesnia`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231213	20231212
1691	4244 32 0	23939 860 1016	`jasmin-aesni`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231222	20231222
1706	3795 0 0	17847 772 1080	`T:aesnib`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231213	20231212
1899	2528 0 0	15427 756 1048	`T:aesnib`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231213	20231212
1929	3709 0 0	16635 756 1048	`T:aesnic`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231213	20231212
2307	3719 0 0	24240 780 1080	`sodium-aesni`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231213	20231212
2965	1791 0 0	20691 756 1048	`sodium-aesni`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231213	20231212
3155	2358 0 0	22243 820 1016	`sodium-aesni`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231213	20231212
37379	7123 4096 0	23768 4884 1080	`T:ref`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231213	20231212
405240	9811 0 0	32837 828 1048	`T:sodium-softaes`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231213	20231212
414472	9811 0 0	32853 828 1048	`T:sodium-softaes`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231213	20231212
454285	11278 1024 0	34376 1812 1080	`T:sodium-softaes`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231213	20231212
505020	8259 0 0	30661 828 1016	`T:sodium-softaes`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231213	20231212
663198	8446 1024 0	29456 1812 1080	`T:sodium-softaes`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231213	20231212
664058	9291 1024 0	29816 1812 1080	`T:sodium-softaes`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231213	20231212
688578	4215 1024 0	23163 1788 1048	`T:sodium-softaes`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20231213	20231212
710975	6600 0 0	26563 820 1016	`T:sodium-softaes`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231213	20231212
958197	6562 0 0	26339 820 1016	`T:sodium-softaes`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20231213	20231212

Compiler output

Implementation: T:aesnia
Security model: timingleaks
Compiler: clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(encrypt.o): in function `crypto_aead_aegis128l_aesnia_timingleaks_encrypt':
try.c: encrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: encrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: encrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: encrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(encrypt.o): in function `crypto_aead_aegis128l_aesnia_timingleaks_decrypt':
try.c: encrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(encrypt.o):encrypt.c:(.text+0x...): more undefined references to `aegis128L_enc_aut_step' follow
try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(encrypt.o): in function `crypto_aead_aegis128l_aesnia_timingleaks_decrypt':
try.c: encrypt.c:(.text+0x...): undefined reference to `aegis128L_dec_aut_step'
try.c: /usr/bin/ld: encrypt.c:(.text+0x...): undefined reference to `aegis128L_dec_aut_step'
try.c: clang: error: linker command failed with exit code 1 (use -v to see invocation)

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:aesnia

Compiler output

Implementation: T:aesnia
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

encrypt.c: encrypt.c:34:25: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'aegis128L_initialization' that is compiled without support for 'aes'
encrypt.c: state[7] = _mm_aesenc_si128(state[6],state[7]);
encrypt.c: ^
encrypt.c: encrypt.c:35:25: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'aegis128L_initialization' that is compiled without support for 'aes'
encrypt.c: state[6] = _mm_aesenc_si128(state[5],state[6]);
encrypt.c: ^
encrypt.c: encrypt.c:36:25: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'aegis128L_initialization' that is compiled without support for 'aes'
encrypt.c: state[5] = _mm_aesenc_si128(state[4],state[5]);
encrypt.c: ^
encrypt.c: encrypt.c:37:25: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'aegis128L_initialization' that is compiled without support for 'aes'
encrypt.c: state[4] = _mm_aesenc_si128(state[3],state[4]);
encrypt.c: ^
encrypt.c: encrypt.c:38:25: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'aegis128L_initialization' that is compiled without support for 'aes'
encrypt.c: state[3] = _mm_aesenc_si128(state[2],state[3]);
encrypt.c: ^
encrypt.c: encrypt.c:39:25: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'aegis128L_initialization' that is compiled without support for 'aes'
encrypt.c: state[2] = _mm_aesenc_si128(state[1],state[2]);
encrypt.c: ^
encrypt.c: encrypt.c:40:25: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'aegis128L_initialization' that is compiled without support for 'aes'
encrypt.c: state[1] = _mm_aesenc_si128(state[0],state[1]);
encrypt.c: ^
encrypt.c: encrypt.c:41:25: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'aegis128L_initialization' that is compiled without support for 'aes'
encrypt.c: state[0] = _mm_aesenc_si128(tmp,state[0]);
encrypt.c: ^
encrypt.c: 8 errors generated.

Number of similar (compiler,implementation) pairs: 3, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:aesnia T:aesnib T:aesnic

Compiler output

Implementation: T:aesnia
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:aesnia

Compiler output

Implementation: T:ref
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(ecrypt.o): in function `crypto_aead_aegis128l_ref_timingleaks_encrypt':
try.c: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(ecrypt.o): in function `crypto_aead_aegis128l_ref_timingleaks_decrypt':
try.c: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(ecrypt.o):ecrypt.c:(.text+0x...): more undefined references to `aegis128L_enc_aut_step' follow
try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(ecrypt.o): in function `crypto_aead_aegis128l_ref_timingleaks_decrypt':
try.c: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_dec_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_dec_aut_step'
try.c: clang: error: linker command failed with exit code 1 (use -v to see invocation)

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref

Compiler output

Implementation: T:ref
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(ecrypt.o): in function `crypto_aead_aegis128l_ref_timingleaks_encrypt':
try.c: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(ecrypt.o): in function `crypto_aead_aegis128l_ref_timingleaks_decrypt':
try.c: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_dec_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_dec_aut_step'
try.c: collect2: error: ld returned 1 exit status

Number of similar (compiler,implementation) pairs: 2, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref

Compiler output

Implementation: T:ref
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref