Implementation notes: armeabi, berry2, crypto_scalarmult/curve25519

Computer: berry2
Microarchitecture: armeabi; Cortex-A7 (410fc075)
Architecture: armeabi
CPU ID: unknown CPU ID
SUPERCOP version: 20240425
Operation: crypto_scalarmult
Primitive: curve25519

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
5497692	7540 0 0	23184 420 1536	`ref10`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240507	20240425
5497839	7536 0 0	21360 420 1536	`ref10`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240507	20240425
5801942	8752 0 0	33017 424 1552	`ref10`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240507	20240425
5906676	7096 0 0	19920 412 1536	`ref10`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240507	20240425
16284495	12696 0 0	26376 420 1536	`ref10`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240507	20240425
82761317	3016 0 0	16840 420 1536	`ref`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240507	20240425
83067598	4016 0 0	19660 420 1536	`ref`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240507	20240425
83343878	24552 0 0	48890 424 1552	`ref`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240507	20240425
83806925	2644 0 0	15468 412 1536	`ref`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240507	20240425
90826009	3096 0 0	16776 420 1536	`ref`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240507	20240425

Compiler output

Implementation: donna_c64
Security model: constbranchindex
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

try.c: /usr/bin/ld: libcrypto_scalarmult_curve25519.a(smult.o): in function `crypto_scalarmult_curve25519_donna_c64_constbranchindex':
try.c: smult.c:(.text+0x...): undefined reference to `__multi3'
try.c: /usr/bin/ld: smult.c:(.text+0x...): undefined reference to `__multi3'
try.c: /usr/bin/ld: smult.c:(.text+0x...): undefined reference to `__multi3'
try.c: /usr/bin/ld: smult.c:(.text+0x...): undefined reference to `__multi3'
try.c: /usr/bin/ld: smult.c:(.text+0x...): undefined reference to `__multi3'
try.c: /usr/bin/ld: libcrypto_scalarmult_curve25519.a(smult.o):smult.c:(.text+0x...): more undefined references to `__multi3' follow
try.c: clang: error: linker command failed with exit code 1 (use -v to see invocation)

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	donna_c64

Compiler output

Implementation: donna_c64
Security model: constbranchindex
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

smult.c: smult.c:34:1: error: unable to emulate 'TI'
smult.c: typedef unsigned uint128_t __attribute__((mode(TI)));
smult.c: ^~~~~~~
smult.c: smult.c: In function 'fscalar_product':
smult.c: smult.c:76:49: warning: right shift count >= width of type [-Wshift-count-overflow]
smult.c: a = ((uint128_t) in[1]) * scalar + ((limb) (a >> 51));
smult.c: ^~
smult.c: smult.c:79:49: warning: right shift count >= width of type [-Wshift-count-overflow]
smult.c: a = ((uint128_t) in[2]) * scalar + ((limb) (a >> 51));
smult.c: ^~
smult.c: smult.c:82:49: warning: right shift count >= width of type [-Wshift-count-overflow]
smult.c: a = ((uint128_t) in[3]) * scalar + ((limb) (a >> 51));
smult.c: ^~
smult.c: smult.c:85:49: warning: right shift count >= width of type [-Wshift-count-overflow]
smult.c: a = ((uint128_t) in[4]) * scalar + ((limb) (a >> 51));
smult.c: ^~
smult.c: smult.c:88:19: warning: right shift count >= width of type [-Wshift-count-overflow]
smult.c: output[0] += (a >> 51) * 19;
smult.c: ^~
smult.c: smult.c: In function 'fmul':
smult.c: smult.c:132:70: warning: right shift count >= width of type [-Wshift-count-overflow]
smult.c: r0 = (limb)t[0] & 0x7ffffffffffff; c = (limb)(t[0] >> 51);
smult.c: ^~
smult.c: smult.c:133:70: warning: right shift count >= width of type [-Wshift-count-overflow]
smult.c: t[1] += c; r1 = (limb)t[1] & 0x7ffffffffffff; c = (limb)(t[1] >> 51);
smult.c: ...

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	donna_c64
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	donna_c64
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	donna_c64
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	donna_c64

Compiler output

Implementation: neon2
Security model: constbranchindex
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

scalarmult.S: scalarmult.S:11159:29: error: expected '%<type>' or "<type>"
scalarmult.S: .section .note.GNU-stack,"",@progbits
scalarmult.S: ^

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	neon2

Compiler output

Implementation: neon2
Security model: constbranchindex
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

scalarmult.S: scalarmult.S: Assembler messages:
scalarmult.S: scalarmult.S:11159: Error: junk at end of line, first unrecognized character is `,'

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	neon2
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	neon2
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	neon2
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	neon2

Compiler output

Implementation: rust_crypto
Security model: constbranchindex
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

try.c: Alarm clock

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	rust_crypto
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	rust_crypto
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	rust_crypto
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	rust_crypto
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	rust_crypto