Implementation notes: amd64, rumba5, crypto_sign/aimer128s

Compiler output

fips202.c: In file included from fips202.c:11:
fips202.c: ./KeccakP-1600-SnP.h:41:82: warning: multi-line // comment [-Wcomment]
fips202.c: //#define KeccakP1600_StaticInitialize                                           \
fips202.c:                                                                                  ^
fips202.c: ./KeccakP-1600-SnP.h:56:82: warning: multi-line // comment [-Wcomment]
fips202.c: //#define KeccakP1600_OverwriteBytes                                             \
fips202.c:                                                                                  ^
fips202.c: ./KeccakP-1600-SnP.h:63:82: warning: multi-line // comment [-Wcomment]
fips202.c: //#define KeccakP1600_OverwriteWithZeroes                                        \
fips202.c:                                                                                  ^
fips202.c: ./KeccakP-1600-SnP.h:68:82: warning: multi-line // comment [-Wcomment]
fips202.c: //#define KeccakP1600_Permute_Nrounds                                            \
fips202.c:                                                                                  ^
fips202.c: ./KeccakP-1600-SnP.h:72:82: warning: multi-line // comment [-Wcomment]
fips202.c: //#define KeccakP1600_Permute_12rounds                                           \
fips202.c:                                                                                  ^
fips202.c: ./KeccakP-1600-SnP.h:76:82: warning: multi-line // comment [-Wcomment]
fips202.c: //#define KeccakP1600_Permute_24rounds                                           \
fips202.c:                                                                                  ^
fips202.c: ./KeccakP-1600-SnP.h:85:82: warning: multi-line // comment [-Wcomment]
fips202.c: //#define KeccakP1600_ExtractAndAddBytes                                         \
fips202.c:                                                                                  ^
fips202.c: ./KeccakP-1600-SnP.h:93:82: warning: multi-line // comment [-Wcomment]
fips202.c: //#define KeccakF1600_FastLoop_Absorb                                            \
fips202.c:                                                                                  ^
fips202.c: ...

Compiler output

KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:149:9: error: always_inline function '_mm256_loadu_si256' requires target feature 'avx', but would be inlined into function 'KeccakP1600times4_AddLanesAll' that is compiled without support for 'avx'
KeccakP-1600-times4-SIMD256.c:         Xor_In4( 0 );
KeccakP-1600-times4-SIMD256.c:         ^
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:138:38: note: expanded from macro 'Xor_In4'
KeccakP-1600-times4-SIMD256.c: #define Xor_In4( argIndex ) lanes0 = LOAD256u( curData0[argIndex]),\
KeccakP-1600-times4-SIMD256.c:                                      ^
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:49:33: note: expanded from macro 'LOAD256u'
KeccakP-1600-times4-SIMD256.c: #define LOAD256u(a)             _mm256_loadu_si256((const V256 *)&(a))
KeccakP-1600-times4-SIMD256.c:                                 ^
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:149:9: error: AVX vector return of type '__m256i' (vector of 4 'long long' values) without 'avx' enabled changes the ABI
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:138:38: note: expanded from macro 'Xor_In4'
KeccakP-1600-times4-SIMD256.c: #define Xor_In4( argIndex ) lanes0 = LOAD256u( curData0[argIndex]),\
KeccakP-1600-times4-SIMD256.c:                                      ^
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:49:33: note: expanded from macro 'LOAD256u'
KeccakP-1600-times4-SIMD256.c: #define LOAD256u(a)             _mm256_loadu_si256((const V256 *)&(a))
KeccakP-1600-times4-SIMD256.c:                                 ^
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:149:9: error: always_inline function '_mm256_loadu_si256' requires target feature 'avx', but would be inlined into function 'KeccakP1600times4_AddLanesAll' that is compiled without support for 'avx'
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:139:47: note: expanded from macro 'Xor_In4'
KeccakP-1600-times4-SIMD256.c:                                      lanes1 = LOAD256u( curData1[argIndex]),\
KeccakP-1600-times4-SIMD256.c:                                               ^
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:49:33: note: expanded from macro 'LOAD256u'
KeccakP-1600-times4-SIMD256.c: #define LOAD256u(a)             _mm256_loadu_si256((const V256 *)&(a))
KeccakP-1600-times4-SIMD256.c:                                 ^
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:149:9: error: AVX vector return of type '__m256i' (vector of 4 'long long' values) without 'avx' enabled changes the ABI
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:139:47: note: expanded from macro 'Xor_In4'
KeccakP-1600-times4-SIMD256.c: ...

Compiler output

fips202.c: In file included from fips202.c:11:
fips202.c: KeccakP-1600-SnP.h:41:1: warning: multi-line comment [-Wcomment]
fips202.c:    41 | //#define KeccakP1600_StaticInitialize                                           \
fips202.c:       | ^
fips202.c: KeccakP-1600-SnP.h:56:1: warning: multi-line comment [-Wcomment]
fips202.c:    56 | //#define KeccakP1600_OverwriteBytes                                             \
fips202.c:       | ^
fips202.c: KeccakP-1600-SnP.h:63:1: warning: multi-line comment [-Wcomment]
fips202.c:    63 | //#define KeccakP1600_OverwriteWithZeroes                                        \
fips202.c:       | ^
fips202.c: KeccakP-1600-SnP.h:68:1: warning: multi-line comment [-Wcomment]
fips202.c:    68 | //#define KeccakP1600_Permute_Nrounds                                            \
fips202.c:       | ^
fips202.c: KeccakP-1600-SnP.h:72:1: warning: multi-line comment [-Wcomment]
fips202.c:    72 | //#define KeccakP1600_Permute_12rounds                                           \
fips202.c:       | ^
fips202.c: KeccakP-1600-SnP.h:76:1: warning: multi-line comment [-Wcomment]
fips202.c:    76 | //#define KeccakP1600_Permute_24rounds                                           \
fips202.c:       | ^
fips202.c: KeccakP-1600-SnP.h:85:1: warning: multi-line comment [-Wcomment]
fips202.c:    85 | //#define KeccakP1600_ExtractAndAddBytes                                         \
fips202.c:       | ^
fips202.c: KeccakP-1600-SnP.h:93:1: warning: multi-line comment [-Wcomment]
fips202.c:    93 | //#define KeccakF1600_FastLoop_Absorb                                            \
fips202.c:       | ^
fips202.c: ...

Namespace violations

KeccakP-1600-AVX2.o ALLON a
KeccakP-1600-AVX2.o KeccakF1600_FastLoop_Absorb T
KeccakP-1600-AVX2.o KeccakP1600_12rounds_FastLoop_Absorb T
KeccakP-1600-AVX2.o KeccakP1600_AddByte T
KeccakP-1600-AVX2.o KeccakP1600_AddBytes T
KeccakP-1600-AVX2.o KeccakP1600_ExtractAndAddBytes T
KeccakP-1600-AVX2.o KeccakP1600_ExtractBytes T
KeccakP-1600-AVX2.o KeccakP1600_Initialize T
KeccakP-1600-AVX2.o KeccakP1600_OverwriteBytes T
KeccakP-1600-AVX2.o KeccakP1600_OverwriteWithZeroes T
KeccakP-1600-AVX2.o KeccakP1600_Permute_12rounds T
KeccakP-1600-AVX2.o KeccakP1600_Permute_24rounds T
KeccakP-1600-AVX2.o KeccakP1600_Permute_Nrounds T
KeccakP-1600-AVX2.o _KeccakF1600_FastLoop_Absorb T
KeccakP-1600-AVX2.o _KeccakP1600_12rounds_FastLoop_Absorb T
KeccakP-1600-AVX2.o _KeccakP1600_AddByte T
KeccakP-1600-AVX2.o _KeccakP1600_AddBytes T
KeccakP-1600-AVX2.o _KeccakP1600_ExtractAndAddBytes T
KeccakP-1600-AVX2.o _KeccakP1600_ExtractBytes T
KeccakP-1600-AVX2.o _KeccakP1600_Initialize T
KeccakP-1600-AVX2.o _KeccakP1600_OverwriteBytes T
KeccakP-1600-AVX2.o _KeccakP1600_OverwriteWithZeroes T
KeccakP-1600-AVX2.o _KeccakP1600_Permute_12rounds T
KeccakP-1600-AVX2.o _KeccakP1600_Permute_24rounds T
KeccakP-1600-AVX2.o _KeccakP1600_Permute_Nrounds T
KeccakP-1600-times4-SIMD256.o KeccakF1600times4_FastLoop_Absorb T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_12rounds_FastLoop_Absorb T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_AddBytes T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_AddLanesAll T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_ExtractAndAddBytes T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_ExtractAndAddLanesAll T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_ExtractBytes T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_ExtractLanesAll T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_InitializeAll T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_OverwriteBytes T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_OverwriteLanesAll T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_OverwriteWithZeroes T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_PermuteAll_12rounds T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_PermuteAll_24rounds T
aes.o aes128_ctr T
aes.o aes128_ctr_keyexp T
aes.o aes128_ctx_release T
aes.o aes128_ecb T
aes.o aes128_ecb_keyexp T
aes.o aes192_ctr T
aes.o aes192_ctr_keyexp T
aes.o aes192_ctx_release T
aes.o aes192_ecb T
aes.o aes192_ecb_keyexp T
aes.o aes256_ctr T
aes.o aes256_ctr_keyexp T
aes.o aes256_ctx_release T
aes.o aes256_ecb T
aes.o aes256_ecb_keyexp T
aim2.o samsungsds_aimer128s_avx2_GF_exp_invmer_e_1 T
aim2.o samsungsds_aimer128s_avx2_GF_exp_invmer_e_2 T
aim2.o samsungsds_aimer128s_avx2_GF_exp_mer_e_star T
aim2.o samsungsds_aimer128s_avx2_aim2 T
aim2.o samsungsds_aimer128s_avx2_aim2_sbox_outputs T
aim2.o samsungsds_aimer128s_avx2_generate_matrices_L_and_U T
aim2.o samsungsds_aimer128s_avx2_generate_matrix_LU T
field.o samsungsds_aimer128s_avx2_GF_add T
field.o samsungsds_aimer128s_avx2_GF_copy T
field.o samsungsds_aimer128s_avx2_GF_from_bytes T
field.o samsungsds_aimer128s_avx2_GF_mul T
field.o samsungsds_aimer128s_avx2_GF_mul_N T
field.o samsungsds_aimer128s_avx2_GF_mul_add T
field.o samsungsds_aimer128s_avx2_GF_mul_add_N T
field.o samsungsds_aimer128s_avx2_GF_set0 T
field.o samsungsds_aimer128s_avx2_GF_sqr T
field.o samsungsds_aimer128s_avx2_GF_sqr_N T
field.o samsungsds_aimer128s_avx2_GF_to_bytes T
field.o samsungsds_aimer128s_avx2_GF_transposed_matmul T
field.o samsungsds_aimer128s_avx2_GF_transposed_matmul_add_N T
field.o samsungsds_aimer128s_avx2_POLY_mul_add_N T
field.o samsungsds_aimer128s_avx2_POLY_red_N T
fips202.o fips202avx_sha3_256 T
fips202.o fips202avx_sha3_256_absorb T
fips202.o fips202avx_sha3_256_finalize T
fips202.o fips202avx_sha3_256_init T
fips202.o fips202avx_shake128 T
fips202.o fips202avx_shake128_absorb T
fips202.o fips202avx_shake128_finalize T
fips202.o fips202avx_shake128_init T
fips202.o fips202avx_shake128_squeeze T
fips202.o fips202avx_shake256 T
fips202.o fips202avx_shake256_absorb T
fips202.o fips202avx_shake256_finalize T
fips202.o fips202avx_shake256_init T
fips202.o fips202avx_shake256_squeeze T
hash.o samsungsds_aimer128s_avx2_hash_final T
hash.o samsungsds_aimer128s_avx2_hash_final_x4 T
hash.o samsungsds_aimer128s_avx2_hash_init T
hash.o samsungsds_aimer128s_avx2_hash_init_prefix T
hash.o samsungsds_aimer128s_avx2_hash_init_prefix_x4 T
hash.o samsungsds_aimer128s_avx2_hash_init_x4 T
hash.o samsungsds_aimer128s_avx2_hash_squeeze T
hash.o samsungsds_aimer128s_avx2_hash_squeeze_x4 T
hash.o samsungsds_aimer128s_avx2_hash_update T
hash.o samsungsds_aimer128s_avx2_hash_update_x4 T
hash.o samsungsds_aimer128s_avx2_hash_update_x4_1 T
sign.o samsungsds_aimer128s_avx2_aim2_mpc_N T
sign.o samsungsds_aimer128s_avx2_commit_and_expand_tape_x4 T
sign.o samsungsds_aimer128s_avx2_crypto_sign_signature T
sign.o samsungsds_aimer128s_avx2_crypto_sign_verify T
sign.o samsungsds_aimer128s_avx2_run_phase_1 T
sign.o samsungsds_aimer128s_avx2_run_phase_2_and_3 T
tree.o samsungsds_aimer128s_avx2_expand_trees T
tree.o samsungsds_aimer128s_avx2_reconstruct_tree T
tree.o samsungsds_aimer128s_avx2_reveal_all_but T

Namespace violations

aes.o aes128_ctr T
aes.o aes128_ctr_keyexp T
aes.o aes128_ctx_release T
aes.o aes128_ecb T
aes.o aes128_ecb_keyexp T
aes.o aes192_ctr T
aes.o aes192_ctr_keyexp T
aes.o aes192_ctx_release T
aes.o aes192_ecb T
aes.o aes192_ecb_keyexp T
aes.o aes256_ctr T
aes.o aes256_ctr_keyexp T
aes.o aes256_ctx_release T
aes.o aes256_ecb T
aes.o aes256_ecb_keyexp T
aim2.o samsungsds_aimer128s_mem_opt_GF_exp_invmer_e_1 T
aim2.o samsungsds_aimer128s_mem_opt_GF_exp_invmer_e_2 T
aim2.o samsungsds_aimer128s_mem_opt_GF_exp_mer_e_star T
aim2.o samsungsds_aimer128s_mem_opt_aim2 T
aim2.o samsungsds_aimer128s_mem_opt_aim2_sbox_outputs T
aim2.o samsungsds_aimer128s_mem_opt_generate_matrices_L_and_U T
aim2.o samsungsds_aimer128s_mem_opt_generate_matrix_LU T
field.o samsungsds_aimer128s_mem_opt_GF_add T
field.o samsungsds_aimer128s_mem_opt_GF_copy T
field.o samsungsds_aimer128s_mem_opt_GF_from_bytes T
field.o samsungsds_aimer128s_mem_opt_GF_mul T
field.o samsungsds_aimer128s_mem_opt_GF_mul_add T
field.o samsungsds_aimer128s_mem_opt_GF_mul_add_s T
field.o samsungsds_aimer128s_mem_opt_GF_mul_s T
field.o samsungsds_aimer128s_mem_opt_GF_set0 T
field.o samsungsds_aimer128s_mem_opt_GF_sqr_s T
field.o samsungsds_aimer128s_mem_opt_GF_to_bytes T
field.o samsungsds_aimer128s_mem_opt_GF_transposed_matmul T
field.o samsungsds_aimer128s_mem_opt_GF_transposed_matmul_add T
fips202.o sha3_256 T
fips202.o sha3_256_inc_absorb T
fips202.o sha3_256_inc_ctx_clone T
fips202.o sha3_256_inc_ctx_release T
fips202.o sha3_256_inc_finalize T
fips202.o sha3_256_inc_init T
fips202.o sha3_384 T
fips202.o sha3_384_inc_absorb T
fips202.o sha3_384_inc_ctx_clone T
fips202.o sha3_384_inc_ctx_release T
fips202.o sha3_384_inc_finalize T
fips202.o sha3_384_inc_init T
fips202.o sha3_512 T
fips202.o sha3_512_inc_absorb T
fips202.o sha3_512_inc_ctx_clone T
fips202.o sha3_512_inc_ctx_release T
fips202.o sha3_512_inc_finalize T
fips202.o sha3_512_inc_init T
fips202.o shake128 T
fips202.o shake128_absorb T
fips202.o shake128_ctx_clone T
fips202.o shake128_ctx_release T
fips202.o shake128_inc_absorb T
fips202.o shake128_inc_ctx_clone T
fips202.o shake128_inc_ctx_release T
fips202.o shake128_inc_finalize T
fips202.o shake128_inc_init T
fips202.o shake128_inc_squeeze T
fips202.o shake128_squeezeblocks T
fips202.o shake256 T
fips202.o shake256_absorb T
fips202.o shake256_ctx_clone T
fips202.o shake256_ctx_release T
fips202.o shake256_inc_absorb T
fips202.o shake256_inc_ctx_clone T
fips202.o shake256_inc_ctx_release T
fips202.o shake256_inc_finalize T
fips202.o shake256_inc_init T
fips202.o shake256_inc_squeeze T
fips202.o shake256_squeezeblocks T
hash.o samsungsds_aimer128s_mem_opt_hash_ctx_clone T
hash.o samsungsds_aimer128s_mem_opt_hash_ctx_release T
hash.o samsungsds_aimer128s_mem_opt_hash_final T
hash.o samsungsds_aimer128s_mem_opt_hash_init T
hash.o samsungsds_aimer128s_mem_opt_hash_init_prefix T
hash.o samsungsds_aimer128s_mem_opt_hash_squeeze T
hash.o samsungsds_aimer128s_mem_opt_hash_update T
sign.o samsungsds_aimer128s_mem_opt_aim2_mpc T
sign.o samsungsds_aimer128s_mem_opt_commit_and_expand_tape T
sign.o samsungsds_aimer128s_mem_opt_crypto_sign_signature T
sign.o samsungsds_aimer128s_mem_opt_crypto_sign_verify T
sign.o samsungsds_aimer128s_mem_opt_run_phase_1 T
sign.o samsungsds_aimer128s_mem_opt_run_phase_1_to_3 T
sign.o samsungsds_aimer128s_mem_opt_run_phase_1_to_5 T
tree.o samsungsds_aimer128s_mem_opt_expand_tree T
tree.o samsungsds_aimer128s_mem_opt_reconstruct_tree T
tree.o samsungsds_aimer128s_mem_opt_reveal_all_but T

Namespace violations

aes.o aes128_ctr T
aes.o aes128_ctr_keyexp T
aes.o aes128_ctx_release T
aes.o aes128_ecb T
aes.o aes128_ecb_keyexp T
aes.o aes192_ctr T
aes.o aes192_ctr_keyexp T
aes.o aes192_ctx_release T
aes.o aes192_ecb T
aes.o aes192_ecb_keyexp T
aes.o aes256_ctr T
aes.o aes256_ctr_keyexp T
aes.o aes256_ctx_release T
aes.o aes256_ecb T
aes.o aes256_ecb_keyexp T
aim2.o samsungsds_aimer128s_ref_GF_exp_invmer_e_1 T
aim2.o samsungsds_aimer128s_ref_GF_exp_invmer_e_2 T
aim2.o samsungsds_aimer128s_ref_GF_exp_mer_e_star T
aim2.o samsungsds_aimer128s_ref_aim2 T
aim2.o samsungsds_aimer128s_ref_aim2_sbox_outputs T
aim2.o samsungsds_aimer128s_ref_generate_matrices_L_and_U T
aim2.o samsungsds_aimer128s_ref_generate_matrix_LU T
field.o samsungsds_aimer128s_ref_GF_add T
field.o samsungsds_aimer128s_ref_GF_copy T
field.o samsungsds_aimer128s_ref_GF_from_bytes T
field.o samsungsds_aimer128s_ref_GF_mul T
field.o samsungsds_aimer128s_ref_GF_mul_add T
field.o samsungsds_aimer128s_ref_GF_mul_add_s T
field.o samsungsds_aimer128s_ref_GF_mul_s T
field.o samsungsds_aimer128s_ref_GF_set0 T
field.o samsungsds_aimer128s_ref_GF_sqr_s T
field.o samsungsds_aimer128s_ref_GF_to_bytes T
field.o samsungsds_aimer128s_ref_GF_transposed_matmul T
field.o samsungsds_aimer128s_ref_GF_transposed_matmul_add T
fips202.o sha3_256 T
fips202.o sha3_256_inc_absorb T
fips202.o sha3_256_inc_ctx_clone T
fips202.o sha3_256_inc_ctx_release T
fips202.o sha3_256_inc_finalize T
fips202.o sha3_256_inc_init T
fips202.o sha3_384 T
fips202.o sha3_384_inc_absorb T
fips202.o sha3_384_inc_ctx_clone T
fips202.o sha3_384_inc_ctx_release T
fips202.o sha3_384_inc_finalize T
fips202.o sha3_384_inc_init T
fips202.o sha3_512 T
fips202.o sha3_512_inc_absorb T
fips202.o sha3_512_inc_ctx_clone T
fips202.o sha3_512_inc_ctx_release T
fips202.o sha3_512_inc_finalize T
fips202.o sha3_512_inc_init T
fips202.o shake128 T
fips202.o shake128_absorb T
fips202.o shake128_ctx_clone T
fips202.o shake128_ctx_release T
fips202.o shake128_inc_absorb T
fips202.o shake128_inc_ctx_clone T
fips202.o shake128_inc_ctx_release T
fips202.o shake128_inc_finalize T
fips202.o shake128_inc_init T
fips202.o shake128_inc_squeeze T
fips202.o shake128_squeezeblocks T
fips202.o shake256 T
fips202.o shake256_absorb T
fips202.o shake256_ctx_clone T
fips202.o shake256_ctx_release T
fips202.o shake256_inc_absorb T
fips202.o shake256_inc_ctx_clone T
fips202.o shake256_inc_ctx_release T
fips202.o shake256_inc_finalize T
fips202.o shake256_inc_init T
fips202.o shake256_inc_squeeze T
fips202.o shake256_squeezeblocks T
hash.o samsungsds_aimer128s_ref_hash_ctx_clone T
hash.o samsungsds_aimer128s_ref_hash_ctx_release T
hash.o samsungsds_aimer128s_ref_hash_final T
hash.o samsungsds_aimer128s_ref_hash_init T
hash.o samsungsds_aimer128s_ref_hash_init_prefix T
hash.o samsungsds_aimer128s_ref_hash_squeeze T
hash.o samsungsds_aimer128s_ref_hash_update T
sign.o samsungsds_aimer128s_ref_aim2_mpc T
sign.o samsungsds_aimer128s_ref_commit_and_expand_tape T
sign.o samsungsds_aimer128s_ref_crypto_sign_signature T
sign.o samsungsds_aimer128s_ref_crypto_sign_verify T
sign.o samsungsds_aimer128s_ref_run_phase_1 T
sign.o samsungsds_aimer128s_ref_run_phase_2_and_3 T
tree.o samsungsds_aimer128s_ref_expand_trees T
tree.o samsungsds_aimer128s_ref_reconstruct_tree T
tree.o samsungsds_aimer128s_ref_reveal_all_but T

Passed TIMECOP

TIMECOP iterations: 10