Implementation notes: armeabi, berry2, crypto_aead/romulusm

Computer: berry2
Microarchitecture: armeabi; Cortex-A7 (410fc075)
Architecture: armeabi
CPU ID: unknown CPU ID
SUPERCOP version: 20240425
Operation: crypto_aead
Primitive: romulusm

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
2530874	26368 640 0	39392 1036 816	`aadomn/opt32`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240506	20240425
3114204	28548 640 0	51638 1024 832	`aadomn/opt32`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240506	20240425
3627566	19284 640 0	30488 1036 816	`aadomn/opt32`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240506	20240425
3899774	17668 640 0	28333 1028 816	`aadomn/opt32`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240506	20240425
4707000	21208 640 0	32728 1036 816	`aadomn/opt32`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240506	20240425
8079245	14132 12 0	37241 396 832	`T:ref`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240506	20240425
8393676	24372 12 0	37388 408 816	`T:ref`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240506	20240425
22204381	6896 12 0	18043 404 816	`T:ref`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240506	20240425
24730674	5132 12 0	15683 396 816	`T:ref`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240506	20240425
24891077	5760 12 0	17223 404 816	`T:ref`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240506	20240425

Test failure

Implementation: T:fixslice_opt32
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

error 111
crypto_aead_decrypt returns nonzero

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:fixslice_opt32
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:fixslice_opt32
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:fixslice_opt32
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:fixslice_opt32
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:fixslice_opt32

Test failure

Implementation: T:opt32t
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

error 111
crypto_aead_decrypt allows trivial forgeries

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt32t
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt32t
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt32t
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt32t
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt32t

Compiler output

Implementation: aadomn/armv7a
Security model: constbranchindex
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

skinny128.S: <instantiation>:2:2: error: instruction requires: armv8m.base
skinny128.S: movw r2, #0x0004
skinny128.S: ^
skinny128.S: skinny128.S:219:2: note: while in macro instantiation
skinny128.S: load_vtbl
skinny128.S: ^
skinny128.S: <instantiation>:3:2: error: instruction requires: armv8m.base
skinny128.S: movt r2, #0x080c
skinny128.S: ^
skinny128.S: skinny128.S:219:2: note: while in macro instantiation
skinny128.S: load_vtbl
skinny128.S: ^
skinny128.S: <instantiation>:4:2: error: instruction requires: armv8m.base
skinny128.S: movw r3, #0x0501
skinny128.S: ^
skinny128.S: skinny128.S:219:2: note: while in macro instantiation
skinny128.S: load_vtbl
skinny128.S: ^
skinny128.S: <instantiation>:5:2: error: instruction requires: armv8m.base
skinny128.S: movt r3, #0x0d09
skinny128.S: ^
skinny128.S: skinny128.S:219:2: note: while in macro instantiation
skinny128.S: load_vtbl
skinny128.S: ^
skinny128.S: <instantiation>:7:2: error: instruction requires: armv8m.base
skinny128.S: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	aadomn/armv7a

Compiler output

Implementation: aadomn/armv7a
Security model: constbranchindex
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

skinny128.S: skinny128.S: Assembler messages:
skinny128.S: skinny128.S:215: Error: selected processor does not support `vld1.8 {q0},[r1]' in Thumb mode
skinny128.S: skinny128.S:216: Error: selected processor does not support `vld1.8 {q3},[r2]' in Thumb mode
skinny128.S: skinny128.S:217: Error: selected processor does not support `vld1.8 {q4},[r3]' in Thumb mode
skinny128.S: skinny128.S:218: Error: selected processor does not support `vld1.8 {q5},[r4]' in Thumb mode
skinny128.S: skinny128.S:219: Error: selected FPU does not support instruction -- `vmov.i8 d12,#0x0f'
skinny128.S: skinny128.S:225: Error: selected processor does not support `vand d2,d0,d12' in Thumb mode
skinny128.S: skinny128.S:225: Error: selected processor does not support `vand d3,d1,d12' in Thumb mode
skinny128.S: skinny128.S:225: Error: selected processor does not support `vshr.u8 d4,d0,#4' in Thumb mode
skinny128.S: skinny128.S:225: Error: selected processor does not support `vshr.u8 d5,d1,#4' in Thumb mode
skinny128.S: skinny128.S:225: Error: selected processor does not support `vtbl.8 d0,{d26,d27},d2' in Thumb mode
skinny128.S: skinny128.S:225: Error: selected processor does not support `vtbl.8 d1,{d26,d27},d3' in Thumb mode
skinny128.S: skinny128.S:225: Error: selected processor does not support `vtbl.8 d4,{d24,d25},d4' in Thumb mode
skinny128.S: skinny128.S:225: Error: selected processor does not support `vtbl.8 d5,{d24,d25},d5' in Thumb mode
skinny128.S: skinny128.S:225: Error: selected processor does not support `veor d0,d0,d4' in Thumb mode
skinny128.S: skinny128.S:225: Error: selected processor does not support `veor d1,d1,d5' in Thumb mode
skinny128.S: skinny128.S:225: Error: selected processor does not support `veor d16,d6,d8' in Thumb mode
skinny128.S: skinny128.S:225: Error: selected processor does not support `vshr.u8 d4,d0,#4' in Thumb mode
skinny128.S: skinny128.S:225: Error: selected processor does not support `vshr.u8 d5,d1,#4' in Thumb mode
skinny128.S: skinny128.S:225: Error: selected processor does not support `veor d18,d18,d10' in Thumb mode
skinny128.S: skinny128.S:225: Error: selected processor does not support `vand d2,d0,d12' in Thumb mode
skinny128.S: skinny128.S:225: Error: selected processor does not support `vand d3,d1,d12' in Thumb mode
skinny128.S: skinny128.S:225: Error: selected processor does not support `vshr.u8 d0,d0,#7' in Thumb mode
skinny128.S: skinny128.S:225: Error: selected processor does not support `vshr.u8 d1,d1,#7' in Thumb mode
skinny128.S: skinny128.S:225: Error: selected processor does not support `veor d18,d18,d16' in Thumb mode
skinny128.S: ...

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv7a
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv7a
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv7a
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv7a

Compiler output

Implementation: aadomn/armv7m
Security model: constbranchindex
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

skinny128_core.s: <instantiation>:1:1: error: invalid instruction, any one of the following would fix this:
skinny128_core.s: orr r8, r2, r3
skinny128_core.s: ^
skinny128_core.s: skinny128_core.s:89:2: note: while in macro instantiation
skinny128_core.s: sbox r2, r3, r4, r5, r8, r6
skinny128_core.s: ^
skinny128_core.s: <instantiation>:1:1: note: instruction requires: arm-mode
skinny128_core.s: orr r8, r2, r3
skinny128_core.s: ^
skinny128_core.s: skinny128_core.s:89:2: note: while in macro instantiation
skinny128_core.s: sbox r2, r3, r4, r5, r8, r6
skinny128_core.s: ^
skinny128_core.s: <instantiation>:1:1: note: instruction requires: thumb2
skinny128_core.s: orr r8, r2, r3
skinny128_core.s: ^
skinny128_core.s: skinny128_core.s:89:2: note: while in macro instantiation
skinny128_core.s: sbox r2, r3, r4, r5, r8, r6
skinny128_core.s: ^
skinny128_core.s: <instantiation>:2:2: error: invalid instruction, any one of the following would fix this:
skinny128_core.s: eor r5, r5, r8
skinny128_core.s: ^
skinny128_core.s: skinny128_core.s:89:2: note: while in macro instantiation
skinny128_core.s: sbox r2, r3, r4, r5, r8, r6
skinny128_core.s: ^
skinny128_core.s: <instantiation>:2:2: note: instruction requires: arm-mode
skinny128_core.s: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	aadomn/armv7m

Compiler output

Implementation: aadomn/armv7m
Security model: constbranchindex
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

skinny128_core.s: skinny128_core.s: Assembler messages:
skinny128_core.s: skinny128_core.s:175: Error: junk at end of line, first unrecognized character is `,'

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv7m
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv7m
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv7m
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv7m

Compiler output

Implementation: aadomn/armv8a/onthefly
Security model: constbranchindex
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

skinny128.S: skinny128.S:151:11: error: register expected
skinny128.S: ldr q0, [x1]
skinny128.S: ^
skinny128.S: skinny128.S:152:11: error: register expected
skinny128.S: ldr q4, [x2]
skinny128.S: ^
skinny128.S: skinny128.S:153:11: error: register expected
skinny128.S: ldr q5, [x3]
skinny128.S: ^
skinny128.S: skinny128.S:154:11: error: register expected
skinny128.S: ldr q6, [x4]
skinny128.S: ^
skinny128.S: skinny128.S:155:6: error: operand must be a register in range [r0, r15]
skinny128.S: adr x1, rconst
skinny128.S: ^
skinny128.S: <instantiation>:1:11: error: literal value out of range for directive
skinny128.S: ldr q20, =0x0b0c0e0a0d080f090304060205000701
skinny128.S: ^
skinny128.S: skinny128.S:156:2: note: while in macro instantiation
skinny128.S: prepare_encrypt
skinny128.S: ^
skinny128.S: <instantiation>:2:12: error: literal value out of range for directive
skinny128.S: ldr q21, =0x00000000000000020000000000000000
skinny128.S: ^
skinny128.S: skinny128.S:156:2: note: while in macro instantiation
skinny128.S: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	aadomn/armv8a/onthefly

Compiler output

Implementation: aadomn/armv8a/onthefly
Security model: constbranchindex
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

skinny128.S: skinny128.S: Assembler messages:
skinny128.S: skinny128.S:151: Error: ARM register expected -- `ldr q0,[x1]'
skinny128.S: skinny128.S:152: Error: ARM register expected -- `ldr q4,[x2]'
skinny128.S: skinny128.S:153: Error: ARM register expected -- `ldr q5,[x3]'
skinny128.S: skinny128.S:154: Error: ARM register expected -- `ldr q6,[x4]'
skinny128.S: skinny128.S:155: Error: ARM register expected -- `adr x1,rconst'
skinny128.S: skinny128.S:156: Error: ARM register expected -- `ldr q20,=0x0b0c0e0a0d080f090304060205000701'
skinny128.S: skinny128.S:156: Error: ARM register expected -- `ldr q21,=0x00000000000000020000000000000000'
skinny128.S: skinny128.S:156: Error: ARM register expected -- `ldr q22,=0x00000000000000000000000000000000'
skinny128.S: skinny128.S:156: Error: ARM register expected -- `ldr q23,=0x09080b0a06050407030201000c0f0e0d'
skinny128.S: skinny128.S:156: Error: ARM register expected -- `ldr q24,=0x0302010009080b0a1010101009080b0a'
skinny128.S: skinny128.S:156: Error: ARM register expected -- `ldr q25,=0x000000000000000000000000ffffffff'
skinny128.S: skinny128.S:156: Error: ARM register expected -- `ldr q26,=0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f'
skinny128.S: skinny128.S:156: Error: ARM register expected -- `ldr q27,=0x2e0e26062c0c34142a02220a00281830'
skinny128.S: skinny128.S:156: Error: ARM register expected -- `ldr q28,=0xd1915111c1814101d090501080c00040'
skinny128.S: skinny128.S:156: Error: ARM register expected -- `ldr q29,=0x1a181b190a080b091310121103000201'
skinny128.S: skinny128.S:156: Error: ARM register expected -- `ldr q30,=0x65646363454443433534333385848180'
skinny128.S: skinny128.S:156: Error: ARM register expected -- `ldr q31,=0xe5e4e1e0c5c4c1c0a5a4a1a015141313'
skinny128.S: skinny128.S:157: Error: bad arguments to instruction -- `and v1.16b,v0.16b,v26.16b'
skinny128.S: skinny128.S:157: Error: bad instruction `ushr v2.16b,v0.16b,#4'
skinny128.S: skinny128.S:157: Error: bad instruction `tbl v0.16b,{v27.16b},v1.16b'
skinny128.S: skinny128.S:157: Error: bad instruction `tbl v2.16b,{v28.16b},v2.16b'
skinny128.S: skinny128.S:157: Error: ARM register expected -- `ldr d16,[x1],#8'
skinny128.S: skinny128.S:157: Error: bad arguments to instruction -- `eor v7.8b,v5.8b,v6.8b'
skinny128.S: skinny128.S:157: Error: bad arguments to instruction -- `eor v7.8b,v7.8b,v4.8b'
skinny128.S: ...

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv8a/onthefly
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv8a/onthefly
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv8a/onthefly
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv8a/onthefly

Compiler output

Implementation: aadomn/armv8a/precalculate
Security model: constbranchindex
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

skinny128.S: skinny128.S:111:11: error: register expected
skinny128.S: ldr q0, [x1]
skinny128.S: ^
skinny128.S: skinny128.S:112:11: error: register expected
skinny128.S: ldr d3, [x2]
skinny128.S: ^
skinny128.S: <instantiation>:1:11: error: literal value out of range for directive
skinny128.S: ldr q21, =0x00000000000000020000000000000000
skinny128.S: ^
skinny128.S: skinny128.S:113:2: note: while in macro instantiation
skinny128.S: prepare_encrypt
skinny128.S: ^
skinny128.S: <instantiation>:2:12: error: literal value out of range for directive
skinny128.S: ldr q22, =0x0f0e0d0c0a0b09080304060205000701
skinny128.S: ^
skinny128.S: skinny128.S:113:2: note: while in macro instantiation
skinny128.S: prepare_encrypt
skinny128.S: ^
skinny128.S: <instantiation>:3:12: error: literal value out of range for directive
skinny128.S: ldr q23, =0x09080b0a06050407030201000c0f0e0d
skinny128.S: ^
skinny128.S: skinny128.S:113:2: note: while in macro instantiation
skinny128.S: prepare_encrypt
skinny128.S: ^
skinny128.S: <instantiation>:4:12: error: literal value out of range for directive
skinny128.S: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	aadomn/armv8a/precalculate

Compiler output

Implementation: aadomn/armv8a/precalculate
Security model: constbranchindex
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

skinny128.S: skinny128.S: Assembler messages:
skinny128.S: skinny128.S:111: Error: ARM register expected -- `ldr q0,[x1]'
skinny128.S: skinny128.S:112: Error: ARM register expected -- `ldr d3,[x2]'
skinny128.S: skinny128.S:113: Error: ARM register expected -- `ldr q21,=0x00000000000000020000000000000000'
skinny128.S: skinny128.S:113: Error: ARM register expected -- `ldr q22,=0x0f0e0d0c0a0b09080304060205000701'
skinny128.S: skinny128.S:113: Error: ARM register expected -- `ldr q23,=0x09080b0a06050407030201000c0f0e0d'
skinny128.S: skinny128.S:113: Error: ARM register expected -- `ldr q24,=0x0302010009080b0a1010101009080b0a'
skinny128.S: skinny128.S:113: Error: ARM register expected -- `ldr q25,=0x000000000000000000000000ffffffff'
skinny128.S: skinny128.S:113: Error: ARM register expected -- `ldr q26,=0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f'
skinny128.S: skinny128.S:113: Error: ARM register expected -- `ldr q27,=0x2e0e26062c0c34142a02220a00281830'
skinny128.S: skinny128.S:113: Error: ARM register expected -- `ldr q28,=0xd1915111c1814101d090501080c00040'
skinny128.S: skinny128.S:113: Error: ARM register expected -- `ldr q29,=0x1a181b190a080b091310121103000201'
skinny128.S: skinny128.S:113: Error: ARM register expected -- `ldr q30,=0x65646363454443433534333385848180'
skinny128.S: skinny128.S:113: Error: ARM register expected -- `ldr q31,=0xe5e4e1e0c5c4c1c0a5a4a1a015141313'
skinny128.S: skinny128.S:113: Error: bad arguments to instruction -- `eor v3.16b,v3.16b,v21.16b'
skinny128.S: skinny128.S:114: Error: bad arguments to instruction -- `and v1.16b,v0.16b,v26.16b'
skinny128.S: skinny128.S:114: Error: bad instruction `ushr v2.16b,v0.16b,#4'
skinny128.S: skinny128.S:114: Error: bad instruction `tbl v0.16b,{v27.16b},v1.16b'
skinny128.S: skinny128.S:114: Error: bad instruction `tbl v2.16b,{v28.16b},v2.16b'
skinny128.S: skinny128.S:114: Error: ARM register expected -- `ldr d5,[x3],#8'
skinny128.S: skinny128.S:114: Error: ARM register expected -- `eor v0.16b,v0.16b,v2.16b'
skinny128.S: skinny128.S:114: Error: bad arguments to instruction -- `eor v5.16b,v5.16b,v3.16b'
skinny128.S: skinny128.S:114: Error: bad instruction `ushr v2.16b,v0.16b,#3'
skinny128.S: skinny128.S:114: Error: bad arguments to instruction -- `and v1.16b,v0.16b,v26.16b'
skinny128.S: skinny128.S:114: Error: bad instruction `tbl v2.16b,{v30.16b-v31.16b},v2.16b'
skinny128.S: ...

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv8a/precalculate
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv8a/precalculate
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv8a/precalculate
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv8a/precalculate

Compiler output

Implementation: T:arm_asm_fixslice_cortexm
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

skinny128.s: skinny128.s:23:2: error: instruction requires: armv8m.base
skinny128.s: movw r1, #0xcc00
skinny128.s: ^
skinny128.s: skinny128.s:24:2: error: instruction requires: armv8m.base
skinny128.s: movt r1, #0xcc00 //r1 <- 0xcc00cc00
skinny128.s: ^
skinny128.s: skinny128.s:25:2: error: instruction requires: armv8m.base
skinny128.s: movw r10, #0xcc00
skinny128.s: ^
skinny128.s: skinny128.s:26:2: error: instruction requires: armv8m.base
skinny128.s: movt r10, #0x0033 //r10<- 0xcc000033
skinny128.s: ^
skinny128.s: skinny128.s:27:2: error: invalid instruction, any one of the following would fix this:
skinny128.s: and r11, r1, r6, ror #14
skinny128.s: ^
skinny128.s: skinny128.s:27:2: note: instruction requires: arm-mode
skinny128.s: and r11, r1, r6, ror #14
skinny128.s: ^
skinny128.s: skinny128.s:27:2: note: instruction requires: thumb2
skinny128.s: and r11, r1, r6, ror #14
skinny128.s: ^
skinny128.s: skinny128.s:28:2: error: invalid instruction
skinny128.s: bfi r11, r6, #16, #8
skinny128.s: ^
skinny128.s: skinny128.s:29:2: error: instruction requires: thumb2
skinny128.s: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:arm_asm_fixslice_cortexm

Compiler output

Implementation: T:arm_asm_fixslice_cortexm
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

skinny128.s: skinny128.s: Assembler messages:
skinny128.s: skinny128.s:1710: Error: junk at end of line, first unrecognized character is `,'

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm_asm_fixslice_cortexm
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm_asm_fixslice_cortexm
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm_asm_fixslice_cortexm
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm_asm_fixslice_cortexm

Compiler output

Implementation: T:arm_inline_asm
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

skinny_key_schedule2.c: skinny_key_schedule2.c:33:49: error: invalid instruction, any one of the following would fix this:
skinny_key_schedule2.c: "ldr.w r4, [r0,#28] \n\t" // load master key
skinny_key_schedule2.c: ^
skinny_key_schedule2.c: <inline asm>:6:2: note: instantiated into assembly here
skinny_key_schedule2.c: mov.w r7, #0xfefefefe
skinny_key_schedule2.c: ^
skinny_key_schedule2.c: skinny_key_schedule2.c:33:49: note: invalid operand for instruction
skinny_key_schedule2.c: "ldr.w r4, [r0,#28] \n\t" // load master key
skinny_key_schedule2.c: ^
skinny_key_schedule2.c: <inline asm>:6:24: note: instantiated into assembly here
skinny_key_schedule2.c: mov.w r7, #0xfefefefe
skinny_key_schedule2.c: ^
skinny_key_schedule2.c: skinny_key_schedule2.c:33:49: note: operand must be a register in range [r0, r15]
skinny_key_schedule2.c: "ldr.w r4, [r0,#28] \n\t" // load master key
skinny_key_schedule2.c: ^
skinny_key_schedule2.c: <inline asm>:6:24: note: instantiated into assembly here
skinny_key_schedule2.c: mov.w r7, #0xfefefefe
skinny_key_schedule2.c: ^
skinny_key_schedule2.c: skinny_key_schedule2.c:34:49: error: invalid instruction, any one of the following would fix this:
skinny_key_schedule2.c: "mov.w r7, #0xfefefefe \n\t"
skinny_key_schedule2.c: ^
skinny_key_schedule2.c: <inline asm>:7:2: note: instantiated into assembly here
skinny_key_schedule2.c: mov.w r8, #0x01010101
skinny_key_schedule2.c: ^
skinny_key_schedule2.c: skinny_key_schedule2.c:34:49: note: invalid operand for instruction
skinny_key_schedule2.c: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:arm_inline_asm

Compiler output

Implementation: T:arm_inline_asm
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

skinny_key_schedule2.c: /tmp/ccj7acbs.s: Assembler messages:
skinny_key_schedule2.c: /tmp/ccj7acbs.s:32: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccj7acbs.s:32: Error: bad instruction `ldr.w r1,[r0,#16]'
skinny_key_schedule2.c: /tmp/ccj7acbs.s:33: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccj7acbs.s:33: Error: bad instruction `ldr.w r2,[r0,#20]'
skinny_key_schedule2.c: /tmp/ccj7acbs.s:34: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccj7acbs.s:34: Error: bad instruction `ldr.w r3,[r0,#24]'
skinny_key_schedule2.c: /tmp/ccj7acbs.s:35: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccj7acbs.s:35: Error: bad instruction `ldr.w r4,[r0,#28]'
skinny_key_schedule2.c: /tmp/ccj7acbs.s:36: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccj7acbs.s:36: Error: bad instruction `mov.w r7,#0xfefefefe'
skinny_key_schedule2.c: /tmp/ccj7acbs.s:37: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccj7acbs.s:37: Error: bad instruction `mov.w r8,#0x01010101'
skinny_key_schedule2.c: /tmp/ccj7acbs.s:38: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccj7acbs.s:38: Error: bad instruction `ldr.w r9,[r0,#384]'
skinny_key_schedule2.c: /tmp/ccj7acbs.s:39: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccj7acbs.s:39: Error: bad instruction `ldr.w r10,[r0,#388]'
skinny_key_schedule2.c: /tmp/ccj7acbs.s:40: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccj7acbs.s:40: Error: bad instruction `eor.w r9,r1'
skinny_key_schedule2.c: /tmp/ccj7acbs.s:41: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccj7acbs.s:41: Error: bad instruction `eor.w r10,r2'
skinny_key_schedule2.c: /tmp/ccj7acbs.s:42: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccj7acbs.s:42: Error: bad instruction `str.w r9,[r0,#64]'
skinny_key_schedule2.c: /tmp/ccj7acbs.s:43: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccj7acbs.s:43: Error: bad instruction `str.w r10,[r0,#68]'
skinny_key_schedule2.c: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm_inline_asm

Compiler output

Implementation: T:arm_inline_asm
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE

skinny_key_schedule2.c: /tmp/ccvCBEmL.s: Assembler messages:
skinny_key_schedule2.c: /tmp/ccvCBEmL.s:32: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccvCBEmL.s:32: Error: bad instruction `ldr.w r1,[r0,#16]'
skinny_key_schedule2.c: /tmp/ccvCBEmL.s:33: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccvCBEmL.s:33: Error: bad instruction `ldr.w r2,[r0,#20]'
skinny_key_schedule2.c: /tmp/ccvCBEmL.s:34: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccvCBEmL.s:34: Error: bad instruction `ldr.w r3,[r0,#24]'
skinny_key_schedule2.c: /tmp/ccvCBEmL.s:35: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccvCBEmL.s:35: Error: bad instruction `ldr.w r4,[r0,#28]'
skinny_key_schedule2.c: /tmp/ccvCBEmL.s:36: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccvCBEmL.s:36: Error: bad instruction `mov.w r7,#0xfefefefe'
skinny_key_schedule2.c: /tmp/ccvCBEmL.s:37: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccvCBEmL.s:37: Error: bad instruction `mov.w r8,#0x01010101'
skinny_key_schedule2.c: /tmp/ccvCBEmL.s:38: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccvCBEmL.s:38: Error: bad instruction `ldr.w r9,[r0,#384]'
skinny_key_schedule2.c: /tmp/ccvCBEmL.s:39: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccvCBEmL.s:39: Error: bad instruction `ldr.w r10,[r0,#388]'
skinny_key_schedule2.c: /tmp/ccvCBEmL.s:40: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccvCBEmL.s:40: Error: bad instruction `eor.w r9,r1'
skinny_key_schedule2.c: /tmp/ccvCBEmL.s:41: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccvCBEmL.s:41: Error: bad instruction `eor.w r10,r2'
skinny_key_schedule2.c: /tmp/ccvCBEmL.s:42: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccvCBEmL.s:42: Error: bad instruction `str.w r9,[r0,#64]'
skinny_key_schedule2.c: /tmp/ccvCBEmL.s:43: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccvCBEmL.s:43: Error: bad instruction `str.w r10,[r0,#68]'
skinny_key_schedule2.c: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm_inline_asm

Compiler output

Implementation: T:arm_inline_asm
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE

skinny_key_schedule2.c: /tmp/ccr37gmq.s: Assembler messages:
skinny_key_schedule2.c: /tmp/ccr37gmq.s:32: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccr37gmq.s:32: Error: bad instruction `ldr.w r1,[r0,#16]'
skinny_key_schedule2.c: /tmp/ccr37gmq.s:33: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccr37gmq.s:33: Error: bad instruction `ldr.w r2,[r0,#20]'
skinny_key_schedule2.c: /tmp/ccr37gmq.s:34: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccr37gmq.s:34: Error: bad instruction `ldr.w r3,[r0,#24]'
skinny_key_schedule2.c: /tmp/ccr37gmq.s:35: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccr37gmq.s:35: Error: bad instruction `ldr.w r4,[r0,#28]'
skinny_key_schedule2.c: /tmp/ccr37gmq.s:36: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccr37gmq.s:36: Error: bad instruction `mov.w r7,#0xfefefefe'
skinny_key_schedule2.c: /tmp/ccr37gmq.s:37: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccr37gmq.s:37: Error: bad instruction `mov.w r8,#0x01010101'
skinny_key_schedule2.c: /tmp/ccr37gmq.s:38: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccr37gmq.s:38: Error: bad instruction `ldr.w r9,[r0,#384]'
skinny_key_schedule2.c: /tmp/ccr37gmq.s:39: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccr37gmq.s:39: Error: bad instruction `ldr.w r10,[r0,#388]'
skinny_key_schedule2.c: /tmp/ccr37gmq.s:40: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccr37gmq.s:40: Error: bad instruction `eor.w r9,r1'
skinny_key_schedule2.c: /tmp/ccr37gmq.s:41: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccr37gmq.s:41: Error: bad instruction `eor.w r10,r2'
skinny_key_schedule2.c: /tmp/ccr37gmq.s:42: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccr37gmq.s:42: Error: bad instruction `str.w r9,[r0,#64]'
skinny_key_schedule2.c: /tmp/ccr37gmq.s:43: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/ccr37gmq.s:43: Error: bad instruction `str.w r10,[r0,#68]'
skinny_key_schedule2.c: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm_inline_asm

Compiler output

Implementation: T:arm_inline_asm
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE

skinny_key_schedule2.c: /tmp/cctlyzsi.s: Assembler messages:
skinny_key_schedule2.c: /tmp/cctlyzsi.s:32: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/cctlyzsi.s:32: Error: bad instruction `ldr.w r1,[r0,#16]'
skinny_key_schedule2.c: /tmp/cctlyzsi.s:33: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/cctlyzsi.s:33: Error: bad instruction `ldr.w r2,[r0,#20]'
skinny_key_schedule2.c: /tmp/cctlyzsi.s:34: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/cctlyzsi.s:34: Error: bad instruction `ldr.w r3,[r0,#24]'
skinny_key_schedule2.c: /tmp/cctlyzsi.s:35: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/cctlyzsi.s:35: Error: bad instruction `ldr.w r4,[r0,#28]'
skinny_key_schedule2.c: /tmp/cctlyzsi.s:36: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/cctlyzsi.s:36: Error: bad instruction `mov.w r7,#0xfefefefe'
skinny_key_schedule2.c: /tmp/cctlyzsi.s:37: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/cctlyzsi.s:37: Error: bad instruction `mov.w r8,#0x01010101'
skinny_key_schedule2.c: /tmp/cctlyzsi.s:38: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/cctlyzsi.s:38: Error: bad instruction `ldr.w r9,[r0,#384]'
skinny_key_schedule2.c: /tmp/cctlyzsi.s:39: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/cctlyzsi.s:39: Error: bad instruction `ldr.w r10,[r0,#388]'
skinny_key_schedule2.c: /tmp/cctlyzsi.s:40: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/cctlyzsi.s:40: Error: bad instruction `eor.w r9,r1'
skinny_key_schedule2.c: /tmp/cctlyzsi.s:41: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/cctlyzsi.s:41: Error: bad instruction `eor.w r10,r2'
skinny_key_schedule2.c: /tmp/cctlyzsi.s:42: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/cctlyzsi.s:42: Error: bad instruction `str.w r9,[r0,#64]'
skinny_key_schedule2.c: /tmp/cctlyzsi.s:43: Error: unexpected character `w' in type specifier
skinny_key_schedule2.c: /tmp/cctlyzsi.s:43: Error: bad instruction `str.w r10,[r0,#68]'
skinny_key_schedule2.c: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm_inline_asm

Namespace violations

Implementation: aadomn/opt32
Security model: constbranchindex
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

romulus_m.o romulusm_generate_tag T
romulus_m.o romulusm_init T
romulus_m.o romulusm_process_ad T
romulus_m.o romulusm_process_msg T
romulus_m.o romulusm_verify_tag T
romulus_m.o zeroize T
skinny128.o mixcolumns_0 T
skinny128.o mixcolumns_1 T
skinny128.o mixcolumns_2 T
skinny128.o mixcolumns_3 T
skinny128.o skinny128_384_plus T
tk_schedule.o lfsr2_bs T
tk_schedule.o lfsr3_bs T
tk_schedule.o packing T
tk_schedule.o permute_tk T
tk_schedule.o permute_tk_10 T
tk_schedule.o permute_tk_12 T
tk_schedule.o permute_tk_14 T
tk_schedule.o permute_tk_2 T
tk_schedule.o permute_tk_4 T
tk_schedule.o permute_tk_6 T
tk_schedule.o permute_tk_8 T
tk_schedule.o precompute_lfsr_tk2 T
tk_schedule.o precompute_lfsr_tk3 T
tk_schedule.o rconst_32_bs D
tk_schedule.o tk_schedule_1 T
tk_schedule.o tk_schedule_123 T
tk_schedule.o tk_schedule_13 T
tk_schedule.o tk_schedule_23 T
tk_schedule.o unpacking T

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	aadomn/opt32
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/opt32
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/opt32
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/opt32
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/opt32

Namespace violations

Implementation: T:ref
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

romulus_m_reference.o ad2msg_encryption T
romulus_m_reference.o ad_encryption T
romulus_m_reference.o block_cipher T
romulus_m_reference.o compose_tweakey T
romulus_m_reference.o g8A T
romulus_m_reference.o generate_tag T
romulus_m_reference.o irho T
romulus_m_reference.o lfsr_gf56 T
romulus_m_reference.o msg_decryption T
romulus_m_reference.o msg_encryption T
romulus_m_reference.o nonce_encryption T
romulus_m_reference.o pad T
romulus_m_reference.o reset_lfsr_gf56 T
romulus_m_reference.o rho T
romulus_m_reference.o rho_ad T
romulus_m_reference.o romulus_m_decrypt T
romulus_m_reference.o romulus_m_encrypt T
skinny_reference.o AddConstants T
skinny_reference.o AddKey T
skinny_reference.o BLOCK_SIZE D
skinny_reference.o MixColumn T
skinny_reference.o N_RNDS D
skinny_reference.o P R
skinny_reference.o RC R
skinny_reference.o ShiftRows T
skinny_reference.o SubCell8 T
skinny_reference.o TWEAKEY_P R
skinny_reference.o TWEAKEY_SIZE D
skinny_reference.o enc T
skinny_reference.o sbox_8 R
skinny_reference.o skinny_128_384_plus_enc T

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref