Implementation notes: amd64, speed2supercop, crypto_kem/ledakemcpa33

Computer: speed2supercop
Microarchitecture: amd64; Haswell+AES (306c3)
Architecture: amd64
CPU ID: GenuineIntel-000306c3-1fc9cbf5
SUPERCOP version: 20240425
Operation: crypto_kem
Primitive: ledakemcpa33

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
3209432	58489 431872 52	77277 432640 1664	`T:portableopt`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240428	20240425
48938744	43673 431872 52	61053 432640 1664	`T:portableopt`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240428	20240425
49736940	41243 431872 52	58389 432640 1664	`T:portableopt`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240428	20240425
56803900	27894 431872 52	45503 432640 1632	`T:portableopt`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240428	20240425

Compiler output

Implementation: T:portableopt
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

gf2x_arith_mod_xPplusOne.c: gf2x_arith_mod_xPplusOne.c: In function 'gf2x_mod_fmac':
gf2x_arith_mod_xPplusOne.c: gf2x_arith_mod_xPplusOne.c:803:39: warning: iteration 1 invokes undefined behavior [-Waggressive-loop-optimizations]
gf2x_arith_mod_xPplusOne.c: 803 | result[j] ^= (shifted_temp[j] << low_shift_amt) | ( zeroshift_mask &
gf2x_arith_mod_xPplusOne.c: | ~~~~~~~~~~~~^~~
gf2x_arith_mod_xPplusOne.c: gf2x_arith_mod_xPplusOne.c:802:18: note: within this loop
gf2x_arith_mod_xPplusOne.c: 802 | for (; j < NUM_DIGITS_GF2X_ELEMENT-1 ; j++) {
gf2x_arith_mod_xPplusOne.c: | ~~^~~~~~~~~~~~~~~~~~~~~~~~~~~

Number of similar (compiler,implementation) pairs: 2, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:portableopt
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:portableopt