Implementation notes: aarch64, gcc185, crypto_aead/ppaev11

Computer: gcc185
Microarchitecture: aarch64; Skylark (503f0002)
Architecture: aarch64
CPU ID: 503f0002
SUPERCOP version: 20240107
Operation: crypto_aead
Primitive: ppaev11

Test failure

Implementation: T:ref
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE
error 111
crypto_aead_decrypt returns nonzero
Number of similar (compiler,implementation) pairs: 1, namely:
CompilerImplementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE T:ref

Test failure

Implementation: T:ref
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE
error 111
Number of similar (compiler,implementation) pairs: 3, namely:
CompilerImplementations
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE T:ref
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE T:ref
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE T:ref

Compiler output

Implementation: T:ref
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE
encrypt.c: encrypt.c:36:46: warning: passing 'const unsigned char *' to parameter of type 'unsigned char *' discards qualifiers [-Wincompatible-pointer-types-discards-qualifiers]
encrypt.c: 36 | memcpy( _k, k, 16 ); gen_ivs( _IVa, _IVb, npub, k ); // It would be the right place to preset AES key to avoid rekeying for every block
encrypt.c: | ^~~~
encrypt.c: encrypt.c:15:71: note: passing argument to parameter here
encrypt.c: 15 | static void gen_ivs( unsigned char *, unsigned char *, unsigned char *, unsigned char * );
encrypt.c: | ^
encrypt.c: encrypt.c:36:52: warning: passing 'const unsigned char *' to parameter of type 'unsigned char *' discards qualifiers [-Wincompatible-pointer-types-discards-qualifiers]
encrypt.c: 36 | memcpy( _k, k, 16 ); gen_ivs( _IVa, _IVb, npub, k ); // It would be the right place to preset AES key to avoid rekeying for every block
encrypt.c: | ^
encrypt.c: encrypt.c:15:92: note: passing argument to parameter here
encrypt.c: 15 | static void gen_ivs( unsigned char *, unsigned char *, unsigned char *, unsigned char * );
encrypt.c: | ^
encrypt.c: encrypt.c:39:18: warning: passing 'const unsigned char *' to parameter of type 'unsigned char *' discards qualifiers [-Wincompatible-pointer-types-discards-qualifiers]
encrypt.c: 39 | gen_icv( icv, npub, mlen, adlen, _IVa, _IVb ); // Let's compute the ICV for this message
encrypt.c: | ^~~~
encrypt.c: encrypt.c:16:54: note: passing argument to parameter here
encrypt.c: 16 | static void gen_icv( unsigned char *, unsigned char *, unsigned long long, unsigned long long, unsigned char *, unsigned char * );
encrypt.c: | ^
encrypt.c: encrypt.c:40:19: warning: passing 'const unsigned char *' to parameter of type 'unsigned char *' discards qualifiers [-Wincompatible-pointer-types-discards-qualifiers]
encrypt.c: 40 | gtag_ad( _IVa, ad, adlen, _k, icv ); // AD tag calculated on IVa (and using initial value as input)
encrypt.c: | ^~
encrypt.c: encrypt.c:17:54: note: passing argument to parameter here
encrypt.c: 17 | static void gtag_ad( unsigned char *, unsigned char *, unsigned long long, unsigned char *, unsigned char * );
encrypt.c: | ^
encrypt.c: encrypt.c:50:31: warning: passing 'const unsigned char *' to parameter of type 'unsigned char *' discards qualifiers [-Wincompatible-pointer-types-discards-qualifiers]
encrypt.c: ...
Number of similar (compiler,implementation) pairs: 5, namely:
CompilerImplementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:ref
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:ref
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:ref
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:ref
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:ref

Compiler output

Implementation: T:ref
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE
encrypt.c: encrypt.c: In function 'crypto_aead_ppaev11_ref_timingleaks_encrypt':
encrypt.c: encrypt.c:36:46: warning: passing argument 3 of 'gen_ivs' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
encrypt.c: memcpy( _k, k, 16 ); gen_ivs( _IVa, _IVb, npub, k ); // It would be the right place to preset AES key to avoid rekeying for every block
encrypt.c: ^~~~
encrypt.c: encrypt.c:15:56: note: expected 'unsigned char *' but argument is of type 'const unsigned char *'
encrypt.c: static void gen_ivs( unsigned char *, unsigned char *, unsigned char *, unsigned char * );
encrypt.c: ^~~~~~~~~~~~~~~
encrypt.c: encrypt.c:36:52: warning: passing argument 4 of 'gen_ivs' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
encrypt.c: memcpy( _k, k, 16 ); gen_ivs( _IVa, _IVb, npub, k ); // It would be the right place to preset AES key to avoid rekeying for every block
encrypt.c: ^
encrypt.c: encrypt.c:15:76: note: expected 'unsigned char *' but argument is of type 'const unsigned char *'
encrypt.c: static void gen_ivs( unsigned char *, unsigned char *, unsigned char *, unsigned char * );
encrypt.c: ^~~~~~~~~~~~~~~
encrypt.c: encrypt.c:39:18: warning: passing argument 2 of 'gen_icv' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
encrypt.c: gen_icv( icv, npub, mlen, adlen, _IVa, _IVb ); // Let's compute the ICV for this message
encrypt.c: ^~~~
encrypt.c: encrypt.c:16:39: note: expected 'unsigned char *' but argument is of type 'const unsigned char *'
encrypt.c: static void gen_icv( unsigned char *, unsigned char *, unsigned long long, unsigned long long, unsigned char *, unsigned char * );
encrypt.c: ^~~~~~~~~~~~~~~
encrypt.c: encrypt.c:40:19: warning: passing argument 2 of 'gtag_ad' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
encrypt.c: gtag_ad( _IVa, ad, adlen, _k, icv ); // AD tag calculated on IVa (and using initial value as input)
encrypt.c: ^~
encrypt.c: encrypt.c:17:39: note: expected 'unsigned char *' but argument is of type 'const unsigned char *'
encrypt.c: static void gtag_ad( unsigned char *, unsigned char *, unsigned long long, unsigned char *, unsigned char * );
encrypt.c: ^~~~~~~~~~~~~~~
encrypt.c: ...
Number of similar (compiler,implementation) pairs: 4, namely:
CompilerImplementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE T:ref
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE T:ref
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE T:ref
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE T:ref