Implementation notes: amd64, speed2supercop, crypto_aead/flexaead128b064v12

Computer: speed2supercop
Microarchitecture: amd64; Haswell+AES (306c3)
Architecture: amd64
CPU ID: GenuineIntel-000306c3-1fc9cbf5
SUPERCOP version: 20240425
Operation: crypto_aead
Primitive: flexaead128b064v12
TimeObject sizeTest sizeImplementationCompilerBenchmark dateSUPERCOP version
29537210025 0 024053 752 928T:opt1gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2024042620240425
3079608430 0 021980 744 928T:opt1gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2024042620240425
3319205812 0 018112 728 896T:opt1gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2024042620240425
3993689498 0 023525 752 928T:refgcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2024042620240425
4064968756 0 022365 752 928T:refgcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2024042620240425
7211045687 0 017976 728 896T:refgcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2024042620240425

Test failure

Implementation: T:opt1
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE
error 111
crypto_aead_decrypt returns nonzero

Number of similar (compiler,implementation) pairs: 1, namely:
CompilerImplementations
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE T:opt1

Compiler output

Implementation: T:ref
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE
encrypt.c: In function 'dirShuffleLayer',
encrypt.c: inlined from 'dirPFK' at encrypt.c:631:3,
encrypt.c: inlined from 'sumAD.constprop' at encrypt.c:745:5:
encrypt.c: encrypt.c:585:34: warning: writing 1 byte into a region of size 0 [-Wstringop-overflow=]
encrypt.c: 585 | *(state+(2*i+0)) = *(block+(0*(blocklen/2)+i));
encrypt.c: | ~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
encrypt.c: encrypt.c: In function 'sumAD.constprop':
encrypt.c: encrypt.c:48:18: note: at offset 8 into destination object 'state' of size 8
encrypt.c: 48 | unsigned char state[BLOCKSIZE];
encrypt.c: | ^~~~~
encrypt.c: In function 'dirShuffleLayer',
encrypt.c: inlined from 'dirPFK' at encrypt.c:631:3,
encrypt.c: inlined from 'sumAD.constprop' at encrypt.c:745:5:
encrypt.c: encrypt.c:586:34: warning: writing 1 byte into a region of size 0 [-Wstringop-overflow=]
encrypt.c: 586 | *(state+(2*i+1)) = *(block+(1*(blocklen/2)+i));
encrypt.c: | ~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
encrypt.c: encrypt.c: In function 'sumAD.constprop':
encrypt.c: encrypt.c:48:18: note: at offset [9, 4294967293] into destination object 'state' of size 8
encrypt.c: 48 | unsigned char state[BLOCKSIZE];
encrypt.c: | ^~~~~
encrypt.c: In function 'dirShuffleLayer',
encrypt.c: inlined from 'dirPFK' at encrypt.c:631:3,
encrypt.c: inlined from 'sumAD.constprop' at encrypt.c:745:5:
encrypt.c: encrypt.c:585:34: warning: writing 1 byte into a region of size 0 [-Wstringop-overflow=]
encrypt.c: 585 | *(state+(2*i+0)) = *(block+(0*(blocklen/2)+i));
encrypt.c: ...

Number of similar (compiler,implementation) pairs: 1, namely:
CompilerImplementations
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE T:ref