Implementation notes: armeabi, tinker, crypto_aead/romulusm

Computer: tinker
Microarchitecture: armeabi; Cortex-A17 (410fc0d1)
Architecture: armeabi
CPU ID: unknown CPU ID
SUPERCOP version: 20240107
Operation: crypto_aead
Primitive: romulusm

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
602830	12740 0 0	26526 412 824	`aadomn/armv7a`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240129	20240107
603458	12992 0 0	24209 384 824	`aadomn/armv7a`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240129	20240107
604147	11880 0 0	22353 384 824	`aadomn/armv7a`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240129	20240107
604506	11972 0 0	22296 380 816	`aadomn/armv7a`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240129	20240107
604519	11142 0 0	19989 376 816	`aadomn/armv7a`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240129	20240107
761084	21192 568 0	31524 956 816	`T:arm_inline_asm`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240129	20240107
1296888	9960 0 0	20437 384 824	`aadomn/armv7m`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240129	20240107
1300190	11076 0 0	22285 384 824	`aadomn/armv7m`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240129	20240107
1302674	10156 0 0	20472 380 816	`aadomn/armv7m`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240129	20240107
1757388	26204 640 0	39786 1052 824	`aadomn/opt32`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240129	20240107
2419411	13098 640 0	21941 1016 816	`aadomn/opt32`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240129	20240107
2440034	16138 640 0	26501 1024 816	`aadomn/opt32`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240129	20240107
2473875	22724 640 0	33933 1028 824	`aadomn/opt32`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240129	20240107
2639249	22148 12 0	33353 396 824	`T:ref`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240129	20240107
2703790	17940 640 0	28421 1028 824	`aadomn/opt32`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240129	20240107
4598253	18156 12 0	31770 424 824	`T:ref`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240129	20240107
12818032	5996 12 0	16465 396 824	`T:ref`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240129	20240107
13065940	3430 12 0	12257 388 816	`T:ref`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240129	20240107
15058833	4530 12 0	14840 392 816	`T:ref`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240129	20240107

Test failure

Implementation: T:arm_inline_asm
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

error 111

Number of similar (compiler,implementation) pairs: 3, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm_inline_asm
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm_inline_asm
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm_inline_asm

Test failure

Implementation: T:fixslice_opt32
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

error 111
crypto_aead_decrypt returns nonzero

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:fixslice_opt32
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:fixslice_opt32
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:fixslice_opt32
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:fixslice_opt32
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:fixslice_opt32

Test failure

Implementation: T:opt32t
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

error 111
crypto_aead_decrypt allows trivial forgeries

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt32t
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt32t
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt32t
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt32t
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt32t

Compiler output

Implementation: aadomn/armv7a
Security model: constbranchindex
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

try.c: /usr/bin/arm-linux-gnueabihf-ld: warning: skinny128.o: missing .note.GNU-stack section implies executable stack
try.c: /usr/bin/arm-linux-gnueabihf-ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker
try.c: /usr/bin/arm-linux-gnueabihf-ld: warning: skinny128.o: missing .note.GNU-stack section implies executable stack
try.c: /usr/bin/arm-linux-gnueabihf-ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker
measure.c: /usr/bin/arm-linux-gnueabihf-ld: warning: skinny128.o: missing .note.GNU-stack section implies executable stack
measure.c: /usr/bin/arm-linux-gnueabihf-ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	aadomn/armv7a

Compiler output

Implementation: aadomn/armv7a
Security model: constbranchindex
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

try.c: /usr/bin/ld: warning: skinny128.o: missing .note.GNU-stack section implies executable stack
try.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker
try.c: /usr/bin/ld: warning: skinny128.o: missing .note.GNU-stack section implies executable stack
try.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker
measure.c: /usr/bin/ld: warning: skinny128.o: missing .note.GNU-stack section implies executable stack
measure.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv7a
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv7a
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv7a
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv7a

Compiler output

Implementation: aadomn/armv7m
Security model: constbranchindex
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

skinny128_core.s: skinny128_core.s:143:2: error: invalid instruction, any one of the following would fix this:
skinny128_core.s: sub.w r0, #128 // reset rtk1
skinny128_core.s: ^
skinny128_core.s: skinny128_core.s:143:5: note: operand must be a register in range [r0, r12] or r14
skinny128_core.s: sub.w r0, #128 // reset rtk1
skinny128_core.s: ^
skinny128_core.s: skinny128_core.s:143:13: note: operand must be a register in range [r0, r12] or r14
skinny128_core.s: sub.w r0, #128 // reset rtk1
skinny128_core.s: ^
skinny128_core.s: skinny128_core.s:143:9: note: operand must be a register sp
skinny128_core.s: sub.w r0, #128 // reset rtk1
skinny128_core.s: ^
skinny128_core.s: skinny128_core.s:149:2: error: invalid instruction, any one of the following would fix this:
skinny128_core.s: sub.w r0, #128 // reset rtk1
skinny128_core.s: ^
skinny128_core.s: skinny128_core.s:149:5: note: operand must be a register in range [r0, r12] or r14
skinny128_core.s: sub.w r0, #128 // reset rtk1
skinny128_core.s: ^
skinny128_core.s: skinny128_core.s:149:13: note: operand must be a register in range [r0, r12] or r14
skinny128_core.s: sub.w r0, #128 // reset rtk1
skinny128_core.s: ^
skinny128_core.s: skinny128_core.s:149:9: note: operand must be a register sp
skinny128_core.s: sub.w r0, #128 // reset rtk1
skinny128_core.s: ^

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	aadomn/armv7m

Compiler output

Implementation: aadomn/armv7m
Security model: constbranchindex
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

Number of similar (compiler,implementation) pairs: 3, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv7m
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv7m
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv7m

Compiler output

Implementation: aadomn/armv7m
Security model: constbranchindex
Compiler: gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE

try.c: /usr/bin/ld: warning: skinny128_tks_perm.o: missing .note.GNU-stack section implies executable stack
try.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker
try.c: /usr/bin/ld: libcrypto_aead_romulusm.a(encrypt.o): in function `crypto_aead_romulusm_aadomn_armv7m_constbranchindex_decrypt':
try.c: encrypt.c:(.text+0x...): undefined reference to `tk_schedule_23'
try.c: /usr/bin/ld: libcrypto_aead_romulusm.a(romulus_m.o): in function `romulusm_process_ad':
try.c: romulus_m.c:(.text+0x...): undefined reference to `tk_schedule_123'
try.c: /usr/bin/ld: romulus_m.c:(.text+0x...): undefined reference to `tk_schedule_123'
try.c: /usr/bin/ld: romulus_m.c:(.text+0x...): undefined reference to `tk_schedule_123'
try.c: /usr/bin/ld: romulus_m.c:(.text+0x...): undefined reference to `tk_schedule_123'
try.c: /usr/bin/ld: romulus_m.c:(.text+0x...): undefined reference to `tk_schedule_123'
try.c: /usr/bin/ld: libcrypto_aead_romulusm.a(romulus_m.o):romulus_m.c:(.text+0x...): more undefined references to `tk_schedule_123' follow
try.c: collect2: error: ld returned 1 exit status

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv7m

Compiler output

Implementation: aadomn/armv8a/onthefly
Security model: constbranchindex
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

skinny128.S: skinny128.S:151:11: error: register expected
skinny128.S: ldr q0, [x1]
skinny128.S: ^
skinny128.S: skinny128.S:152:11: error: register expected
skinny128.S: ldr q4, [x2]
skinny128.S: ^
skinny128.S: skinny128.S:153:11: error: register expected
skinny128.S: ldr q5, [x3]
skinny128.S: ^
skinny128.S: skinny128.S:154:11: error: register expected
skinny128.S: ldr q6, [x4]
skinny128.S: ^
skinny128.S: skinny128.S:155:6: error: operand must be a register in range [r0, r15]
skinny128.S: adr x1, rconst
skinny128.S: ^
skinny128.S: <instantiation>:1:11: error: literal value out of range for directive
skinny128.S: ldr q20, =0x0b0c0e0a0d080f090304060205000701
skinny128.S: ^
skinny128.S: skinny128.S:156:2: note: while in macro instantiation
skinny128.S: prepare_encrypt
skinny128.S: ^
skinny128.S: <instantiation>:2:12: error: literal value out of range for directive
skinny128.S: ldr q21, =0x00000000000000020000000000000000
skinny128.S: ^
skinny128.S: skinny128.S:156:2: note: while in macro instantiation
skinny128.S: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	aadomn/armv8a/onthefly

Compiler output

Implementation: aadomn/armv8a/onthefly
Security model: constbranchindex
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

skinny128.S: skinny128.S: Assembler messages:
skinny128.S: skinny128.S:151: Error: ARM register expected -- `ldr q0,[x1]'
skinny128.S: skinny128.S:152: Error: ARM register expected -- `ldr q4,[x2]'
skinny128.S: skinny128.S:153: Error: ARM register expected -- `ldr q5,[x3]'
skinny128.S: skinny128.S:154: Error: ARM register expected -- `ldr q6,[x4]'
skinny128.S: skinny128.S:155: Error: ARM register expected -- `adr x1,rconst'
skinny128.S: skinny128.S:49: Error: ARM register expected -- `ldr q20,=0x0b0c0e0a0d080f090304060205000701'
skinny128.S: skinny128.S:156: Info: macro invoked from here
skinny128.S: skinny128.S:50: Error: ARM register expected -- `ldr q21,=0x00000000000000020000000000000000'
skinny128.S: skinny128.S:156: Info: macro invoked from here
skinny128.S: skinny128.S:51: Error: ARM register expected -- `ldr q22,=0x00000000000000000000000000000000'
skinny128.S: skinny128.S:156: Info: macro invoked from here
skinny128.S: skinny128.S:52: Error: ARM register expected -- `ldr q23,=0x09080b0a06050407030201000c0f0e0d'
skinny128.S: skinny128.S:156: Info: macro invoked from here
skinny128.S: skinny128.S:53: Error: ARM register expected -- `ldr q24,=0x0302010009080b0a1010101009080b0a'
skinny128.S: skinny128.S:156: Info: macro invoked from here
skinny128.S: skinny128.S:54: Error: ARM register expected -- `ldr q25,=0x000000000000000000000000ffffffff'
skinny128.S: skinny128.S:156: Info: macro invoked from here
skinny128.S: skinny128.S:55: Error: ARM register expected -- `ldr q26,=0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f'
skinny128.S: skinny128.S:156: Info: macro invoked from here
skinny128.S: skinny128.S:56: Error: ARM register expected -- `ldr q27,=0x2e0e26062c0c34142a02220a00281830'
skinny128.S: skinny128.S:156: Info: macro invoked from here
skinny128.S: skinny128.S:57: Error: ARM register expected -- `ldr q28,=0xd1915111c1814101d090501080c00040'
skinny128.S: skinny128.S:156: Info: macro invoked from here
skinny128.S: skinny128.S:58: Error: ARM register expected -- `ldr q29,=0x1a181b190a080b091310121103000201'
skinny128.S: ...

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv8a/onthefly
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv8a/onthefly
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv8a/onthefly
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv8a/onthefly

Compiler output

Implementation: aadomn/armv8a/precalculate
Security model: constbranchindex
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

skinny128.S: skinny128.S:111:11: error: register expected
skinny128.S: ldr q0, [x1]
skinny128.S: ^
skinny128.S: skinny128.S:112:11: error: register expected
skinny128.S: ldr d3, [x2]
skinny128.S: ^
skinny128.S: <instantiation>:1:11: error: literal value out of range for directive
skinny128.S: ldr q21, =0x00000000000000020000000000000000
skinny128.S: ^
skinny128.S: skinny128.S:113:2: note: while in macro instantiation
skinny128.S: prepare_encrypt
skinny128.S: ^
skinny128.S: <instantiation>:2:12: error: literal value out of range for directive
skinny128.S: ldr q22, =0x0f0e0d0c0a0b09080304060205000701
skinny128.S: ^
skinny128.S: skinny128.S:113:2: note: while in macro instantiation
skinny128.S: prepare_encrypt
skinny128.S: ^
skinny128.S: <instantiation>:3:12: error: literal value out of range for directive
skinny128.S: ldr q23, =0x09080b0a06050407030201000c0f0e0d
skinny128.S: ^
skinny128.S: skinny128.S:113:2: note: while in macro instantiation
skinny128.S: prepare_encrypt
skinny128.S: ^
skinny128.S: <instantiation>:4:12: error: literal value out of range for directive
skinny128.S: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	aadomn/armv8a/precalculate

Compiler output

Implementation: aadomn/armv8a/precalculate
Security model: constbranchindex
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

skinny128.S: skinny128.S: Assembler messages:
skinny128.S: skinny128.S:111: Error: ARM register expected -- `ldr q0,[x1]'
skinny128.S: skinny128.S:112: Error: ARM register expected -- `ldr d3,[x2]'
skinny128.S: skinny128.S:21: Error: ARM register expected -- `ldr q21,=0x00000000000000020000000000000000'
skinny128.S: skinny128.S:113: Info: macro invoked from here
skinny128.S: skinny128.S:22: Error: ARM register expected -- `ldr q22,=0x0f0e0d0c0a0b09080304060205000701'
skinny128.S: skinny128.S:113: Info: macro invoked from here
skinny128.S: skinny128.S:23: Error: ARM register expected -- `ldr q23,=0x09080b0a06050407030201000c0f0e0d'
skinny128.S: skinny128.S:113: Info: macro invoked from here
skinny128.S: skinny128.S:24: Error: ARM register expected -- `ldr q24,=0x0302010009080b0a1010101009080b0a'
skinny128.S: skinny128.S:113: Info: macro invoked from here
skinny128.S: skinny128.S:25: Error: ARM register expected -- `ldr q25,=0x000000000000000000000000ffffffff'
skinny128.S: skinny128.S:113: Info: macro invoked from here
skinny128.S: skinny128.S:26: Error: ARM register expected -- `ldr q26,=0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f'
skinny128.S: skinny128.S:113: Info: macro invoked from here
skinny128.S: skinny128.S:27: Error: ARM register expected -- `ldr q27,=0x2e0e26062c0c34142a02220a00281830'
skinny128.S: skinny128.S:113: Info: macro invoked from here
skinny128.S: skinny128.S:28: Error: ARM register expected -- `ldr q28,=0xd1915111c1814101d090501080c00040'
skinny128.S: skinny128.S:113: Info: macro invoked from here
skinny128.S: skinny128.S:29: Error: ARM register expected -- `ldr q29,=0x1a181b190a080b091310121103000201'
skinny128.S: skinny128.S:113: Info: macro invoked from here
skinny128.S: skinny128.S:30: Error: ARM register expected -- `ldr q30,=0x65646363454443433534333385848180'
skinny128.S: skinny128.S:113: Info: macro invoked from here
skinny128.S: skinny128.S:31: Error: ARM register expected -- `ldr q31,=0xe5e4e1e0c5c4c1c0a5a4a1a015141313'
skinny128.S: skinny128.S:113: Info: macro invoked from here
skinny128.S: ...

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv8a/precalculate
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv8a/precalculate
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv8a/precalculate
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	aadomn/armv8a/precalculate

Compiler output

Implementation: T:arm_asm_fixslice_cortexm
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

skinny128.s: skinny128.s:1654:2: error: invalid instruction, any one of the following would fix this:
skinny128.s: sub.w r0, #128 // rtk1 repeats every 16 rounds
skinny128.s: ^
skinny128.s: skinny128.s:1654:5: note: operand must be a register in range [r0, r12] or r14
skinny128.s: sub.w r0, #128 // rtk1 repeats every 16 rounds
skinny128.s: ^
skinny128.s: skinny128.s:1654:13: note: operand must be a register in range [r0, r12] or r14
skinny128.s: sub.w r0, #128 // rtk1 repeats every 16 rounds
skinny128.s: ^
skinny128.s: skinny128.s:1654:9: note: operand must be a register sp
skinny128.s: sub.w r0, #128 // rtk1 repeats every 16 rounds
skinny128.s: ^
skinny128.s: skinny128.s:1659:2: error: invalid instruction, any one of the following would fix this:
skinny128.s: sub.w r0, #128 // rtk1 repeats every 16 rounds
skinny128.s: ^
skinny128.s: skinny128.s:1659:5: note: operand must be a register in range [r0, r12] or r14
skinny128.s: sub.w r0, #128 // rtk1 repeats every 16 rounds
skinny128.s: ^
skinny128.s: skinny128.s:1659:13: note: operand must be a register in range [r0, r12] or r14
skinny128.s: sub.w r0, #128 // rtk1 repeats every 16 rounds
skinny128.s: ^
skinny128.s: skinny128.s:1659:9: note: operand must be a register sp
skinny128.s: sub.w r0, #128 // rtk1 repeats every 16 rounds
skinny128.s: ^

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:arm_asm_fixslice_cortexm

Compiler output

Implementation: T:arm_asm_fixslice_cortexm
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

try.c: /usr/bin/ld: /tmp/ccc4Uz4N.o: in function `doit':
try.c: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_encrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_decrypt'
try.c: /usr/bin/ld: /tmp/ccc4Uz4N.o: in function `test':
try.c: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_encrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_decrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_decrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_decrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_decrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_decrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_encrypt'
try.c: collect2: error: ld returned 1 exit status

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm_asm_fixslice_cortexm

Compiler output

Implementation: T:arm_asm_fixslice_cortexm
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE

try.c: /usr/bin/ld: /tmp/cc2ohXJI.o: in function `doit':
try.c: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_encrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_decrypt'
try.c: /usr/bin/ld: /tmp/cc2ohXJI.o: in function `test':
try.c: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_encrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_decrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_decrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_decrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_decrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_decrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_encrypt'
try.c: collect2: error: ld returned 1 exit status

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm_asm_fixslice_cortexm

Compiler output

Implementation: T:arm_asm_fixslice_cortexm
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE

try.c: /usr/bin/ld: /tmp/ccVYu2Rv.o: in function `doit':
try.c: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_encrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_decrypt'
try.c: /usr/bin/ld: /tmp/ccVYu2Rv.o: in function `test':
try.c: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_encrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_encrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_decrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_decrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_decrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_decrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_decrypt'
try.c: collect2: error: ld returned 1 exit status

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm_asm_fixslice_cortexm

Compiler output

Implementation: T:arm_asm_fixslice_cortexm
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE

try.c: /usr/bin/ld: /tmp/ccP1OR5G.o: in function `doit':
try.c: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_encrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_decrypt'
try.c: /usr/bin/ld: /tmp/ccP1OR5G.o: in function `test':
try.c: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_encrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_encrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_decrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_decrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_decrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_decrypt'
try.c: /usr/bin/ld: try-small.c:(.text+0x...): undefined reference to `crypto_aead_romulusm_arm_asm_fixslice_cortexm_timingleaks_decrypt'
try.c: collect2: error: ld returned 1 exit status

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm_asm_fixslice_cortexm

Compiler output

Implementation: T:arm_inline_asm
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

skinny_key_schedule2.c: skinny_key_schedule2.c:33:49: error: invalid instruction, any one of the following would fix this:
skinny_key_schedule2.c: "ldr.w r4, [r0,#28] \n\t" // load master key
skinny_key_schedule2.c: ^
skinny_key_schedule2.c: <inline asm>:6:2: note: instantiated into assembly here
skinny_key_schedule2.c: mov.w r7, #0xfefefefe
skinny_key_schedule2.c: ^
skinny_key_schedule2.c: skinny_key_schedule2.c:33:49: note: invalid operand for instruction
skinny_key_schedule2.c: "ldr.w r4, [r0,#28] \n\t" // load master key
skinny_key_schedule2.c: ^
skinny_key_schedule2.c: <inline asm>:6:24: note: instantiated into assembly here
skinny_key_schedule2.c: mov.w r7, #0xfefefefe
skinny_key_schedule2.c: ^
skinny_key_schedule2.c: skinny_key_schedule2.c:33:49: note: operand must be a register in range [r0, r15]
skinny_key_schedule2.c: "ldr.w r4, [r0,#28] \n\t" // load master key
skinny_key_schedule2.c: ^
skinny_key_schedule2.c: <inline asm>:6:24: note: instantiated into assembly here
skinny_key_schedule2.c: mov.w r7, #0xfefefefe
skinny_key_schedule2.c: ^
skinny_key_schedule2.c: skinny_key_schedule2.c:34:49: error: invalid instruction, any one of the following would fix this:
skinny_key_schedule2.c: "mov.w r7, #0xfefefefe \n\t"
skinny_key_schedule2.c: ^
skinny_key_schedule2.c: <inline asm>:7:2: note: instantiated into assembly here
skinny_key_schedule2.c: mov.w r8, #0x01010101
skinny_key_schedule2.c: ^
skinny_key_schedule2.c: skinny_key_schedule2.c:34:49: note: invalid operand for instruction
skinny_key_schedule2.c: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:arm_inline_asm