Implementation notes: amd64, speed2supercop, crypto_kem/ledakemcpa53

Computer: speed2supercop
Microarchitecture: amd64; Haswell+AES (306c3)
Architecture: amd64
CPU ID: GenuineIntel-000306c3-1fc9cbf5
SUPERCOP version: 20240425
Operation: crypto_kem
Primitive: ledakemcpa53

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
43468436	55174 769920 52	74061 770688 1664	`T:portableopt`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240428	20240425
45467092	42812 769920 52	60237 770688 1664	`T:portableopt`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240428	20240425
45566196	40103 769920 52	57237 770688 1664	`T:portableopt`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240428	20240425
164984428	27875 769920 52	45519 770688 1632	`T:portableopt`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240428	20240425

Compiler output

Implementation: T:portableopt
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

gf2x_arith_mod_xPplusOne.c: gf2x_arith_mod_xPplusOne.c: In function 'gf2x_mod_fmac':
gf2x_arith_mod_xPplusOne.c: gf2x_arith_mod_xPplusOne.c:803:39: warning: iteration 1 invokes undefined behavior [-Waggressive-loop-optimizations]
gf2x_arith_mod_xPplusOne.c: 803 | result[j] ^= (shifted_temp[j] << low_shift_amt) | ( zeroshift_mask &
gf2x_arith_mod_xPplusOne.c: | ~~~~~~~~~~~~^~~
gf2x_arith_mod_xPplusOne.c: gf2x_arith_mod_xPplusOne.c:802:18: note: within this loop
gf2x_arith_mod_xPplusOne.c: 802 | for (; j < NUM_DIGITS_GF2X_ELEMENT-1 ; j++) {
gf2x_arith_mod_xPplusOne.c: | ~~^~~~~~~~~~~~~~~~~~~~~~~~~~~

Number of similar (compiler,implementation) pairs: 2, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:portableopt
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:portableopt