Implementation notes: aarch64, minimac, crypto_sign/picnic2l1fs

Computer: minimac
Architecture: aarch64
CPU ID: unknown CPU ID
SUPERCOP version: 20211108
Operation: crypto_sign
Primitive: picnic2l1fs

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
227296721	? ? ?	? ? ?	`T:optimizedct/neon`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210601	20210529
227499779	? ? ?	? ? ?	`T:optimizedct/neon`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210601	20210529
236580358	? ? ?	? ? ?	`T:optimizedct/neon`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210601	20210529
237721114	? ? ?	? ? ?	`T:optimizedct/neon`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210601	20210529
257330747	? ? ?	? ? ?	`T:optimizedct/c`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210601	20210529
257620470	? ? ?	? ? ?	`T:optimizedct/c`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210601	20210529
259769185	? ? ?	? ? ?	`T:optimizedct/c`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210601	20210529
281225148	? ? ?	? ? ?	`T:optimizedct/c`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210601	20210529
304722096	? ? ?	? ? ?	`T:optimizedct/c`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210601	20210529
1632674221	? ? ?	? ? ?	`T:ref`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210601	20210529
1663791539	? ? ?	? ? ?	`T:ref`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210601	20210529
1742453266	? ? ?	? ? ?	`T:ref`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210601	20210529
1824476862	? ? ?	? ? ?	`T:ref`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210601	20210529
2810364749	? ? ?	? ? ?	`T:ref`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210601	20210529

Compiler output

Implementation: T:optimizedct/c
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/knownrandombytes.o) was built for newer macOS version (11.3) than being linked (11.0)
try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/kernelrandombytes.o) was built for newer macOS version (11.3) than being linked (11.0)
try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/cpucycles.o) was built for newer macOS version (11.3) than being linked (11.0)
try.c: ld: warning: could not create compact unwind for _init: registers 21 and 22 not saved contiguously in frame
try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/libsupercop.a(crypto_rng_chacha20_ref_constbranchindex-rng.o)) was built for newer macOS version (11.3) than being linked (11.0)
try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/libkeccak.a(KeccakHash.o)) was built for newer macOS version (11.2) than being linked (11.0)
try.c: ld: warning: could not create compact unwind for _Keccak_HashUpdate: registers 21 and 22 not saved contiguously in frame
try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/libkeccak.a(KeccakSpongeWidth1600.o)) was built for newer macOS version (11.2) than being linked (11.0)
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_Sponge: register 28 saved somewhere other than in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_SpongeAbsorb: registers 25 and 26 not saved contiguously in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_SpongeAbsorbLastFewBits: register 22 saved somewhere other than in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_SpongeSqueeze: registers 25 and 26 not saved contiguously in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_12rounds_Sponge: register 28 saved somewhere other than in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_12rounds_SpongeAbsorb: registers 25 and 26 not saved contiguously in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_12rounds_SpongeAbsorbLastFewBits: register 22 saved somewhere other than in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_12rounds_SpongeSqueeze: registers 25 and 26 not saved contiguously in frame
try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/libkeccak.a(KeccakP-1600-opt64.o)) was built for newer macOS version (11.2) than being linked (11.0)
try.c: ld: warning: could not create compact unwind for _KeccakP1600_AddBytes: registers 25 and 26 not saved contiguously in frame
try.c: ld: warning: could not create compact unwind for _KeccakP1600_ExtractBytes: register 26 saved somewhere other than in frame
try.c: ld: warning: could not create compact unwind for _KeccakF1600_FastLoop_Absorb: registers 27 and 28 not saved contiguously in frame
try.c: ld: warning: could not create compact unwind for _KeccakP1600_12rounds_FastLoop_Absorb: registers 27 and 28 not saved contiguously in frame
try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/knownrandombytes.o) was built for newer macOS version (11.3) than being linked (11.0)
try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/kernelrandombytes.o) was built for newer macOS version (11.3) than being linked (11.0)
try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/cpucycles.o) was built for newer macOS version (11.3) than being linked (11.0)
try.c: ld: warning: could not create compact unwind for _init: registers 21 and 22 not saved contiguously in frame
try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/libsupercop.a(crypto_rng_chacha20_ref_constbranchindex-rng.o)) was built for newer macOS version (11.3) than being linked (11.0)
try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/libkeccak.a(KeccakHash.o)) was built for newer macOS version (11.2) than being linked (11.0)
try.c: ld: warning: could not create compact unwind for _Keccak_HashUpdate: registers 21 and 22 not saved contiguously in frame
try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/libkeccak.a(KeccakSpongeWidth1600.o)) was built for newer macOS version (11.2) than being linked (11.0)
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_Sponge: register 28 saved somewhere other than in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_SpongeAbsorb: registers 25 and 26 not saved contiguously in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_SpongeAbsorbLastFewBits: register 22 saved somewhere other than in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_SpongeSqueeze: registers 25 and 26 not saved contiguously in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_12rounds_Sponge: register 28 saved somewhere other than in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_12rounds_SpongeAbsorb: registers 25 and 26 not saved contiguously in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_12rounds_SpongeAbsorbLastFewBits: register 22 saved somewhere other than in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_12rounds_SpongeSqueeze: registers 25 and 26 not saved contiguously in frame
try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/libkeccak.a(KeccakP-1600-opt64.o)) was built for newer macOS version (11.2) than being linked (11.0)
try.c: ld: warning: could not create compact unwind for _KeccakP1600_AddBytes: registers 25 and 26 not saved contiguously in frame
try.c: ld: warning: could not create compact unwind for _KeccakP1600_ExtractBytes: register 26 saved somewhere other than in frame
try.c: ld: warning: could not create compact unwind for _KeccakF1600_FastLoop_Absorb: registers 27 and 28 not saved contiguously in frame
try.c: ld: warning: could not create compact unwind for _KeccakP1600_12rounds_FastLoop_Absorb: registers 27 and 28 not saved contiguously in frame
measure.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/fastrandombytes.o) was built for newer macOS version (11.3) than being linked (11.0)
measure.c: ld: warning: could not create compact unwind for _randombytes: registers 21 and 22 not saved contiguously in frame
measure.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/kernelrandombytes.o) was built for newer macOS version (11.3) than being linked (11.0)
measure.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/cpucycles.o) was built for newer macOS version (11.3) than being linked (11.0)
measure.c: ld: warning: could not create compact unwind for _init: registers 21 and 22 not saved contiguously in frame
measure.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/libsupercop.a(crypto_rng_chacha20_ref_constbranchindex-rng.o)) was built for newer macOS version (11.3) than being linked (11.0)
measure.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/libkeccak.a(KeccakHash.o)) was built for newer macOS version (11.2) than being linked (11.0)
measure.c: ld: warning: could not create compact unwind for _Keccak_HashUpdate: registers 21 and 22 not saved contiguously in frame
measure.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/libkeccak.a(KeccakSpongeWidth1600.o)) was built for newer macOS version (11.2) than being linked (11.0)
measure.c: ld: warning: could not create compact unwind for _KeccakWidth1600_Sponge: register 28 saved somewhere other than in frame
measure.c: ld: warning: could not create compact unwind for _KeccakWidth1600_SpongeAbsorb: registers 25 and 26 not saved contiguously in frame
measure.c: ld: warning: could not create compact unwind for _KeccakWidth1600_SpongeAbsorbLastFewBits: register 22 saved somewhere other than in frame
measure.c: ld: warning: could not create compact unwind for _KeccakWidth1600_SpongeSqueeze: registers 25 and 26 not saved contiguously in frame
measure.c: ld: warning: could not create compact unwind for _KeccakWidth1600_12rounds_Sponge: register 28 saved somewhere other than in frame
measure.c: ld: warning: could not create compact unwind for _KeccakWidth1600_12rounds_SpongeAbsorb: registers 25 and 26 not saved contiguously in frame
measure.c: ld: warning: could not create compact unwind for _KeccakWidth1600_12rounds_SpongeAbsorbLastFewBits: register 22 saved somewhere other than in frame
measure.c: ld: warning: could not create compact unwind for _KeccakWidth1600_12rounds_SpongeSqueeze: registers 25 and 26 not saved contiguously in frame
measure.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/libkeccak.a(KeccakP-1600-opt64.o)) was built for newer macOS version (11.2) than being linked (11.0)
measure.c: ld: warning: could not create compact unwind for _KeccakP1600_AddBytes: registers 25 and 26 not saved contiguously in frame
measure.c: ld: warning: could not create compact unwind for _KeccakP1600_ExtractBytes: register 26 saved somewhere other than in frame
measure.c: ld: warning: could not create compact unwind for _KeccakF1600_FastLoop_Absorb: registers 27 and 28 not saved contiguously in frame
measure.c: ld: warning: could not create compact unwind for _KeccakP1600_12rounds_FastLoop_Absorb: registers 27 and 28 not saved contiguously in frame

Number of similar (compiler,implementation) pairs: 2, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:optimizedct/c T:ref

Compiler output

Implementation: T:optimizedct/neon
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

picnic2_simulate_mul.c: picnic2_simulate_mul.c:295:57: error: argument to '__builtin_neon_vshrq_n_v' must be a constant integer
picnic2_simulate_mul.c: out128[i1 / 2] = mm128_xor(mm128_and(t1, mask), mm128_sr_u64(mm128_and(t2, mask), width));
picnic2_simulate_mul.c: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
picnic2_simulate_mul.c: ./simd.h:109:28: note: expanded from macro 'mm128_sr_u64'
picnic2_simulate_mul.c: #define mm128_sr_u64(x, s) vshrq_n_u64((x), (s))
picnic2_simulate_mul.c: ^
picnic2_simulate_mul.c: /Library/Developer/CommandLineTools/usr/lib/clang/12.0.5/include/arm_neon.h:25114:24: note: expanded from macro 'vshrq_n_u64'
picnic2_simulate_mul.c: __ret = (uint64x2_t) __builtin_neon_vshrq_n_v((int8x16_t)__s0, __p1, 51); \
picnic2_simulate_mul.c: ^
picnic2_simulate_mul.c: ./simd.h:103:41: note: expanded from macro 'mm128_xor'
picnic2_simulate_mul.c: #define mm128_xor(l, r) veorq_u64((l), (r))
picnic2_simulate_mul.c: ^
picnic2_simulate_mul.c: picnic2_simulate_mul.c:296:58: error: argument to '__builtin_neon_vshlq_n_v' must be a constant integer
picnic2_simulate_mul.c: out128[i2 / 2] = mm128_xor(mm128_nand(mask, t2), mm128_sl_u64(mm128_nand(mask, t1), width));
picnic2_simulate_mul.c: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
picnic2_simulate_mul.c: ./simd.h:108:28: note: expanded from macro 'mm128_sl_u64'
picnic2_simulate_mul.c: #define mm128_sl_u64(x, s) vshlq_n_u64((x), (s))
picnic2_simulate_mul.c: ^
picnic2_simulate_mul.c: /Library/Developer/CommandLineTools/usr/lib/clang/12.0.5/include/arm_neon.h:24706:24: note: expanded from macro 'vshlq_n_u64'
picnic2_simulate_mul.c: __ret = (uint64x2_t) __builtin_neon_vshlq_n_v((int8x16_t)__s0, __p1, 51); \
picnic2_simulate_mul.c: ^
picnic2_simulate_mul.c: ./simd.h:103:41: note: expanded from macro 'mm128_xor'
picnic2_simulate_mul.c: #define mm128_xor(l, r) veorq_u64((l), (r))
picnic2_simulate_mul.c: ^
picnic2_simulate_mul.c: 2 errors generated.

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:optimizedct/neon