Implementation notes: armeabi, berry2, crypto_aead/hs1sivhiv2

Computer: berry2
Microarchitecture: armeabi; Cortex-A7 (410fc075)
Architecture: armeabi
CPU ID: unknown CPU ID
SUPERCOP version: 20240107
Operation: crypto_aead
Primitive: hs1sivhiv2

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
143936	10036 0 0	40383 392 832	`T:faster`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240126	20240107
159697	13128 0 0	32092 404 816	`T:faster`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240126	20240107
168152	6826 0 0	37170 392 832	`T:ref`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240126	20240107
171181	4908 0 0	22820 404 816	`T:faster`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240126	20240107
173173	6449 0 0	25393 404 816	`T:ref`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240126	20240107
175166	4648 0 0	20952 396 816	`T:faster`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240126	20240107
205866	5653 0 0	22728 400 816	`T:ref`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240126	20240107
233004	4274 0 0	20569 396 816	`T:ref`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240126	20240107
279533	4853 0 0	22733 404 816	`T:ref`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240126	20240107

Test failure

Implementation: T:faster
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

error 111

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster

Compiler output

Implementation: T:dolbeau/armv8crypto
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

encrypt.c: In file included from encrypt.c:54:
encrypt.c: /usr/lib/llvm-7/lib/clang/7.0.1/include/arm_neon.h:28:2: error: "NEON support not enabled"
encrypt.c: #error "NEON support not enabled"
encrypt.c: ^
encrypt.c: In file included from encrypt.c:192:
encrypt.c: ./c256.h:148:5: warning: implicit declaration of function 'vtrn1q_u32' is invalid in C99 [-Wimplicit-function-declaration]
encrypt.c: ONEQUAD_TRANSPOSE_NOXOR(0,1,2,3);
encrypt.c: ^
encrypt.c: ./c256.h:134:13: note: expanded from macro 'ONEQUAD_TRANSPOSE_NOXOR'
encrypt.c: t0l = vtrn1q_u32(x_##a,x_##b); \
encrypt.c: ^
encrypt.c: ./c256.h:148:5: error: assigning to 'uint32x4_t' (vector of 4 'uint32_t' values) from incompatible type 'int'
encrypt.c: ONEQUAD_TRANSPOSE_NOXOR(0,1,2,3);
encrypt.c: ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
encrypt.c: ./c256.h:134:11: note: expanded from macro 'ONEQUAD_TRANSPOSE_NOXOR'
encrypt.c: t0l = vtrn1q_u32(x_##a,x_##b); \
encrypt.c: ^ ~~~~~~~~~~~~~~~~~~~~~~~
encrypt.c: ./c256.h:148:5: warning: implicit declaration of function 'vtrn2q_u32' is invalid in C99 [-Wimplicit-function-declaration]
encrypt.c: ./c256.h:135:13: note: expanded from macro 'ONEQUAD_TRANSPOSE_NOXOR'
encrypt.c: t0h = vtrn2q_u32(x_##a,x_##b); \
encrypt.c: ^
encrypt.c: ./c256.h:148:5: error: assigning to 'uint32x4_t' (vector of 4 'uint32_t' values) from incompatible type 'int'
encrypt.c: ONEQUAD_TRANSPOSE_NOXOR(0,1,2,3);
encrypt.c: ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
encrypt.c: ./c256.h:135:11: note: expanded from macro 'ONEQUAD_TRANSPOSE_NOXOR'
encrypt.c: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:dolbeau/armv8crypto

Compiler output

Implementation: T:dolbeau/armv8crypto
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

encrypt.c: In file included from encrypt.c:192:
encrypt.c: c256.h: In function 'chacha_noxor368':
encrypt.c: c256.h:134:13: warning: implicit declaration of function 'vtrn1q_u32'; did you mean 'vtrnq_u32'? [-Wimplicit-function-declaration]
encrypt.c: t0l = vtrn1q_u32(x_##a,x_##b); \
encrypt.c: ^~~~~~~~~~
encrypt.c: c256.h:148:5: note: in expansion of macro 'ONEQUAD_TRANSPOSE_NOXOR'
encrypt.c: ONEQUAD_TRANSPOSE_NOXOR(0,1,2,3);
encrypt.c: ^~~~~~~~~~~~~~~~~~~~~~~
encrypt.c: c256.h:134:11: error: incompatible types when assigning to type 'uint32x4_t' from type 'int'
encrypt.c: t0l = vtrn1q_u32(x_##a,x_##b); \
encrypt.c: ^
encrypt.c: c256.h:148:5: note: in expansion of macro 'ONEQUAD_TRANSPOSE_NOXOR'
encrypt.c: ONEQUAD_TRANSPOSE_NOXOR(0,1,2,3);
encrypt.c: ^~~~~~~~~~~~~~~~~~~~~~~
encrypt.c: c256.h:135:13: warning: implicit declaration of function 'vtrn2q_u32'; did you mean 'vtrnq_u32'? [-Wimplicit-function-declaration]
encrypt.c: t0h = vtrn2q_u32(x_##a,x_##b); \
encrypt.c: ^~~~~~~~~~
encrypt.c: c256.h:148:5: note: in expansion of macro 'ONEQUAD_TRANSPOSE_NOXOR'
encrypt.c: ONEQUAD_TRANSPOSE_NOXOR(0,1,2,3);
encrypt.c: ^~~~~~~~~~~~~~~~~~~~~~~
encrypt.c: c256.h:135:11: error: incompatible types when assigning to type 'uint32x4_t' from type 'int'
encrypt.c: t0h = vtrn2q_u32(x_##a,x_##b); \
encrypt.c: ^
encrypt.c: c256.h:148:5: note: in expansion of macro 'ONEQUAD_TRANSPOSE_NOXOR'
encrypt.c: ONEQUAD_TRANSPOSE_NOXOR(0,1,2,3);
encrypt.c: ...

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:dolbeau/armv8crypto
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:dolbeau/armv8crypto
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:dolbeau/armv8crypto
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:dolbeau/armv8crypto

Compiler output

Implementation: T:faster
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

hs1.c: hs1.c:1033:30: warning: implicitly declaring library function 'malloc' with type 'void *(unsigned int)' [-Wimplicit-function-declaration]
hs1.c: unsigned char *tmp = malloc(abytes);
hs1.c: ^
hs1.c: hs1.c:1033:30: note: include the header <stdlib.h> or explicitly provide a declaration for 'malloc'
hs1.c: hs1.c:1037:9: warning: implicit declaration of function 'free' is invalid in C99 [-Wimplicit-function-declaration]
hs1.c: free(tmp);
hs1.c: ^
hs1.c: 2 warnings generated.

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:faster

Compiler output

Implementation: T:faster
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

hs1.c: hs1.c: In function 'hs1siv_decrypt':
hs1.c: hs1.c:1033:30: warning: implicit declaration of function 'malloc' [-Wimplicit-function-declaration]
hs1.c: unsigned char *tmp = malloc(abytes);
hs1.c: ^~~~~~
hs1.c: hs1.c:1033:30: warning: incompatible implicit declaration of built-in function 'malloc'
hs1.c: hs1.c:1033:30: note: include '<stdlib.h>' or provide a declaration of 'malloc'
hs1.c: hs1.c:25:1:
hs1.c: +#include <stdlib.h>
hs1.c:
hs1.c: hs1.c:1033:30:
hs1.c: unsigned char *tmp = malloc(abytes);
hs1.c: ^~~~~~
hs1.c: hs1.c:1037:9: warning: implicit declaration of function 'free' [-Wimplicit-function-declaration]
hs1.c: free(tmp);
hs1.c: ^~~~
hs1.c: hs1.c:1037:9: warning: incompatible implicit declaration of built-in function 'free'
hs1.c: hs1.c:1037:9: note: include '<stdlib.h>' or provide a declaration of 'free'

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster

Namespace violations

Implementation: T:faster
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

chacha_moon.o chacha_blocks T
hs1.o hash_finalize T
hs1.o hash_step T
hs1.o hs1 T
hs1.o hs1_bzero T
hs1.o hs1_gen_siv T
hs1.o hs1_memcpy T
hs1.o hs1_setup T
hs1.o hs1siv_decrypt T
hs1.o hs1siv_encrypt T
hs1.o poly_finalize T

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:faster
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:faster

Namespace violations

Implementation: T:ref
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

encrypt.o chacha T
encrypt.o chacha_ivsetup T
encrypt.o chacha_keysetup T
encrypt.o hs1 T
encrypt.o hs1_hash T
encrypt.o hs1siv_chacha256 T
encrypt.o hs1siv_decrypt T
encrypt.o hs1siv_encrypt T
encrypt.o hs1siv_subkeygen T
encrypt.o prf_hash2 T

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref