Implementation notes: amd64, titan0, crypto_aead/aegis128l

Computer: titan0
Microarchitecture: amd64; Haswell+AES (306c3)
Architecture: amd64
CPU ID: GenuineIntel-000306c3-bfebfbff
SUPERCOP version: 20240425
Operation: crypto_aead
Primitive: aegis128l

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
2156	4529 32 0	27709 844 1088	`jasmin-aesni`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240426	20240425
2157	4311 32 0	28040 900 1056	`jasmin-aesni`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
2157	4311 32 0	28320 900 1056	`jasmin-aesni`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
2159	4256 32 0	24842 892 1088	`jasmin-aesni`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
2162	4529 32 0	25645 844 1088	`jasmin-aesni`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240426	20240425
2163	4311 32 0	24104 900 1024	`jasmin-aesni`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
2173	4311 32 0	26656 900 1024	`jasmin-aesni`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
2177	4344 32 0	23328 820 1056	`jasmin-aesni`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240426	20240425
2182	9553 0 0	27552 860 1056	`T:aesnic`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
2185	4368 32 0	24988 836 1088	`jasmin-aesni`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240426	20240425
2191	9553 0 0	27272 860 1056	`T:aesnic`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
2208	4607 0 0	27000 860 1024	`sodium-aesni`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
2211	4471 0 0	19058 852 1088	`T:aesnic`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
2211	5117 0 0	28452 812 1088	`sodium-aesni`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240426	20240425
2212	5773 0 0	23744 860 1056	`T:aesnib`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
2214	5773 0 0	23464 860 1056	`T:aesnib`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
2214	4633 0 0	28400 860 1056	`sodium-aesni`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
2214	4633 0 0	28680 860 1056	`sodium-aesni`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
2215	6966 0 0	20840 860 1024	`T:aesnic`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
2215	3023 0 0	22848 860 1024	`sodium-aesni`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
2222	7318 0 0	24739 820 1088	`T:aesnic`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240426	20240425
2227	3250 0 0	23890 852 1088	`sodium-aesni`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
2230	3664 0 0	18226 852 1088	`T:aesnib`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
2238	3867 0 0	17728 860 1024	`T:aesnib`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
2288	3780 0 0	25092 812 1088	`sodium-aesni`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240426	20240425
2313	5281 0 0	20675 820 1088	`T:aesnic`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240426	20240425
2316	6121 0 0	23523 820 1088	`T:aesnib`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240426	20240425
2321	4157 0 0	17958 796 1056	`T:aesnic`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240426	20240425
2324	5849 0 0	23243 820 1088	`T:aesnia`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240426	20240425
2334	3903 0 0	18882 812 1088	`T:aesnia`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240426	20240425
2344	4668 0 0	19682 812 1088	`T:aesnic`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240426	20240425
2363	3312 0 0	18298 812 1088	`T:aesnib`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240426	20240425
2386	2750 0 0	16518 796 1056	`T:aesnib`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240426	20240425
2400	3347 0 0	17898 852 1088	`T:aesnia`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
2418	3894 0 0	19243 820 1088	`T:aesnia`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240426	20240425
2420	3258 0 0	18627 820 1088	`T:aesnib`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240426	20240425
2587	3651 0 0	17496 860 1024	`T:aesnia`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
2713	5502 0 0	23184 860 1056	`T:aesnia`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
2731	5502 0 0	23464 860 1056	`T:aesnia`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
3136	3442 0 0	24324 812 1088	`sodium-aesni`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240426	20240425
3978	2133 0 0	21343 788 1056	`sodium-aesni`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240426	20240425
41928	6386 4096 0	23787 4924 1088	`T:ref`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240426	20240425
607478	8321 0 0	30792 860 1024	`T:sodium-softaes`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
636774	8353 0 0	32192 860 1056	`T:sodium-softaes`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
636854	8353 0 0	32472 860 1056	`T:sodium-softaes`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
738483	6155 0 0	26882 852 1088	`T:sodium-softaes`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
746106	9962 0 0	29864 860 1024	`T:sodium-softaes`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240426	20240425
751190	9017 1024 0	29900 1844 1088	`T:sodium-softaes`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240426	20240425
770551	8219 1024 0	29556 1844 1088	`T:sodium-softaes`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240426	20240425
821455	4556 1024 0	23815 1820 1056	`T:sodium-softaes`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240426	20240425
1297796	10899 1024 0	34268 1844 1088	`T:sodium-softaes`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240426	20240425

Compiler output

Implementation: T:aesnia
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

encrypt.c: encrypt.c:34:25: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'aegis128L_initialization' that is compiled without support for 'aes'
encrypt.c: state[7] = _mm_aesenc_si128(state[6],state[7]);
encrypt.c: ^
encrypt.c: encrypt.c:35:25: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'aegis128L_initialization' that is compiled without support for 'aes'
encrypt.c: state[6] = _mm_aesenc_si128(state[5],state[6]);
encrypt.c: ^
encrypt.c: encrypt.c:36:25: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'aegis128L_initialization' that is compiled without support for 'aes'
encrypt.c: state[5] = _mm_aesenc_si128(state[4],state[5]);
encrypt.c: ^
encrypt.c: encrypt.c:37:25: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'aegis128L_initialization' that is compiled without support for 'aes'
encrypt.c: state[4] = _mm_aesenc_si128(state[3],state[4]);
encrypt.c: ^
encrypt.c: encrypt.c:38:25: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'aegis128L_initialization' that is compiled without support for 'aes'
encrypt.c: state[3] = _mm_aesenc_si128(state[2],state[3]);
encrypt.c: ^
encrypt.c: encrypt.c:39:25: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'aegis128L_initialization' that is compiled without support for 'aes'
encrypt.c: state[2] = _mm_aesenc_si128(state[1],state[2]);
encrypt.c: ^
encrypt.c: encrypt.c:40:25: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'aegis128L_initialization' that is compiled without support for 'aes'
encrypt.c: state[1] = _mm_aesenc_si128(state[0],state[1]);
encrypt.c: ^
encrypt.c: encrypt.c:41:25: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'aegis128L_initialization' that is compiled without support for 'aes'
encrypt.c: state[0] = _mm_aesenc_si128(tmp,state[0]);
encrypt.c: ^
encrypt.c: 8 errors generated.

Number of similar (compiler,implementation) pairs: 3, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:aesnia T:aesnib T:aesnic

Compiler output

Implementation: T:aesnia
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE

try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(encrypt.o): in function `crypto_aead_aegis128l_aesnia_timingleaks_encrypt':
try.c: encrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: encrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: encrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: encrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(encrypt.o): in function `crypto_aead_aegis128l_aesnia_timingleaks_decrypt':
try.c: encrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(encrypt.o):encrypt.c:(.text+0x...): more undefined references to `aegis128L_enc_aut_step' follow
try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(encrypt.o): in function `crypto_aead_aegis128l_aesnia_timingleaks_decrypt':
try.c: encrypt.c:(.text+0x...): undefined reference to `aegis128L_dec_aut_step'
try.c: /usr/bin/ld: encrypt.c:(.text+0x...): undefined reference to `aegis128L_dec_aut_step'
try.c: collect2: error: ld returned 1 exit status

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:aesnia

Compiler output

Implementation: T:ref
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(ecrypt.o): in function `crypto_aead_aegis128l_ref_timingleaks_encrypt':
try.c: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(ecrypt.o): in function `crypto_aead_aegis128l_ref_timingleaks_decrypt':
try.c: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(ecrypt.o):ecrypt.c:(.text+0x...): more undefined references to `aegis128L_enc_aut_step' follow
try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(ecrypt.o): in function `crypto_aead_aegis128l_ref_timingleaks_decrypt':
try.c: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_dec_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_dec_aut_step'
try.c: clang: error: linker command failed with exit code 1 (use -v to see invocation)

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref

Compiler output

Implementation: T:ref
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(ecrypt.o): in function `crypto_aead_aegis128l_ref_timingleaks_encrypt':
try.c: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: libcrypto_aead_aegis128l.a(ecrypt.o): in function `crypto_aead_aegis128l_ref_timingleaks_decrypt':
try.c: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_dec_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_enc_aut_step'
try.c: /usr/bin/ld: ecrypt.c:(.text+0x...): undefined reference to `aegis128L_dec_aut_step'
try.c: collect2: error: ld returned 1 exit status

Number of similar (compiler,implementation) pairs: 2, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref

Compiler output

Implementation: T:ref
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref