Implementation notes: aarch64, minimac, crypto_sign/picnic3l1

Computer: minimac
Architecture: aarch64
CPU ID: unknown CPU ID
SUPERCOP version: 20211108
Operation: crypto_sign
Primitive: picnic3l1

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
34279994	? ? ?	? ? ?	`T:optimizedct/neon`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210601	20210529
35160759	? ? ?	? ? ?	`T:optimizedct/neon`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210601	20210529
35762603	? ? ?	? ? ?	`T:optimizedct/neon`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210601	20210529
36476709	? ? ?	? ? ?	`T:optimizedct/c`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210601	20210529
36707099	? ? ?	? ? ?	`T:optimizedct/c`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210601	20210529
37076552	? ? ?	? ? ?	`T:optimizedct/neon`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210601	20210529
46399121	? ? ?	? ? ?	`T:optimizedct/c`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210601	20210529
47088560	? ? ?	? ? ?	`T:optimizedct/c`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210601	20210529
48116387	? ? ?	? ? ?	`T:optimizedct/c`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210601	20210529
152544575	? ? ?	? ? ?	`T:ref`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210601	20210529
153112019	? ? ?	? ? ?	`T:ref`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210601	20210529
153948386	? ? ?	? ? ?	`T:ref`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210601	20210529
162134467	? ? ?	? ? ?	`T:ref`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210601	20210529
164914625	? ? ?	? ? ?	`T:ref`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210601	20210529

Compiler output

Implementation: T:optimizedct/c
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/knownrandombytes.o) was built for newer macOS version (11.3) than being linked (11.0)
try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/kernelrandombytes.o) was built for newer macOS version (11.3) than being linked (11.0)
try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/cpucycles.o) was built for newer macOS version (11.3) than being linked (11.0)
try.c: ld: warning: could not create compact unwind for _init: registers 21 and 22 not saved contiguously in frame
try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/libsupercop.a(crypto_rng_chacha20_ref_constbranchindex-rng.o)) was built for newer macOS version (11.3) than being linked (11.0)
try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/libkeccak.a(KeccakHash.o)) was built for newer macOS version (11.2) than being linked (11.0)
try.c: ld: warning: could not create compact unwind for _Keccak_HashUpdate: registers 21 and 22 not saved contiguously in frame
try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/libkeccak.a(KeccakSpongeWidth1600.o)) was built for newer macOS version (11.2) than being linked (11.0)
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_Sponge: register 28 saved somewhere other than in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_SpongeAbsorb: registers 25 and 26 not saved contiguously in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_SpongeAbsorbLastFewBits: register 22 saved somewhere other than in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_SpongeSqueeze: registers 25 and 26 not saved contiguously in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_12rounds_Sponge: register 28 saved somewhere other than in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_12rounds_SpongeAbsorb: registers 25 and 26 not saved contiguously in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_12rounds_SpongeAbsorbLastFewBits: register 22 saved somewhere other than in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_12rounds_SpongeSqueeze: registers 25 and 26 not saved contiguously in frame
try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/libkeccak.a(KeccakP-1600-opt64.o)) was built for newer macOS version (11.2) than being linked (11.0)
try.c: ld: warning: could not create compact unwind for _KeccakP1600_AddBytes: registers 25 and 26 not saved contiguously in frame
try.c: ld: warning: could not create compact unwind for _KeccakP1600_ExtractBytes: register 26 saved somewhere other than in frame
try.c: ld: warning: could not create compact unwind for _KeccakF1600_FastLoop_Absorb: registers 27 and 28 not saved contiguously in frame
try.c: ld: warning: could not create compact unwind for _KeccakP1600_12rounds_FastLoop_Absorb: registers 27 and 28 not saved contiguously in frame
try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/knownrandombytes.o) was built for newer macOS version (11.3) than being linked (11.0)
try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/kernelrandombytes.o) was built for newer macOS version (11.3) than being linked (11.0)
try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/cpucycles.o) was built for newer macOS version (11.3) than being linked (11.0)
try.c: ld: warning: could not create compact unwind for _init: registers 21 and 22 not saved contiguously in frame
try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/libsupercop.a(crypto_rng_chacha20_ref_constbranchindex-rng.o)) was built for newer macOS version (11.3) than being linked (11.0)
try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/libkeccak.a(KeccakHash.o)) was built for newer macOS version (11.2) than being linked (11.0)
try.c: ld: warning: could not create compact unwind for _Keccak_HashUpdate: registers 21 and 22 not saved contiguously in frame
try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/libkeccak.a(KeccakSpongeWidth1600.o)) was built for newer macOS version (11.2) than being linked (11.0)
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_Sponge: register 28 saved somewhere other than in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_SpongeAbsorb: registers 25 and 26 not saved contiguously in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_SpongeAbsorbLastFewBits: register 22 saved somewhere other than in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_SpongeSqueeze: registers 25 and 26 not saved contiguously in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_12rounds_Sponge: register 28 saved somewhere other than in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_12rounds_SpongeAbsorb: registers 25 and 26 not saved contiguously in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_12rounds_SpongeAbsorbLastFewBits: register 22 saved somewhere other than in frame
try.c: ld: warning: could not create compact unwind for _KeccakWidth1600_12rounds_SpongeSqueeze: registers 25 and 26 not saved contiguously in frame
try.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/libkeccak.a(KeccakP-1600-opt64.o)) was built for newer macOS version (11.2) than being linked (11.0)
try.c: ld: warning: could not create compact unwind for _KeccakP1600_AddBytes: registers 25 and 26 not saved contiguously in frame
try.c: ld: warning: could not create compact unwind for _KeccakP1600_ExtractBytes: register 26 saved somewhere other than in frame
try.c: ld: warning: could not create compact unwind for _KeccakF1600_FastLoop_Absorb: registers 27 and 28 not saved contiguously in frame
try.c: ld: warning: could not create compact unwind for _KeccakP1600_12rounds_FastLoop_Absorb: registers 27 and 28 not saved contiguously in frame
measure.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/fastrandombytes.o) was built for newer macOS version (11.3) than being linked (11.0)
measure.c: ld: warning: could not create compact unwind for _randombytes: registers 21 and 22 not saved contiguously in frame
measure.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/kernelrandombytes.o) was built for newer macOS version (11.3) than being linked (11.0)
measure.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/cpucycles.o) was built for newer macOS version (11.3) than being linked (11.0)
measure.c: ld: warning: could not create compact unwind for _init: registers 21 and 22 not saved contiguously in frame
measure.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/libsupercop.a(crypto_rng_chacha20_ref_constbranchindex-rng.o)) was built for newer macOS version (11.3) than being linked (11.0)
measure.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/libkeccak.a(KeccakHash.o)) was built for newer macOS version (11.2) than being linked (11.0)
measure.c: ld: warning: could not create compact unwind for _Keccak_HashUpdate: registers 21 and 22 not saved contiguously in frame
measure.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/libkeccak.a(KeccakSpongeWidth1600.o)) was built for newer macOS version (11.2) than being linked (11.0)
measure.c: ld: warning: could not create compact unwind for _KeccakWidth1600_Sponge: register 28 saved somewhere other than in frame
measure.c: ld: warning: could not create compact unwind for _KeccakWidth1600_SpongeAbsorb: registers 25 and 26 not saved contiguously in frame
measure.c: ld: warning: could not create compact unwind for _KeccakWidth1600_SpongeAbsorbLastFewBits: register 22 saved somewhere other than in frame
measure.c: ld: warning: could not create compact unwind for _KeccakWidth1600_SpongeSqueeze: registers 25 and 26 not saved contiguously in frame
measure.c: ld: warning: could not create compact unwind for _KeccakWidth1600_12rounds_Sponge: register 28 saved somewhere other than in frame
measure.c: ld: warning: could not create compact unwind for _KeccakWidth1600_12rounds_SpongeAbsorb: registers 25 and 26 not saved contiguously in frame
measure.c: ld: warning: could not create compact unwind for _KeccakWidth1600_12rounds_SpongeAbsorbLastFewBits: register 22 saved somewhere other than in frame
measure.c: ld: warning: could not create compact unwind for _KeccakWidth1600_12rounds_SpongeSqueeze: registers 25 and 26 not saved contiguously in frame
measure.c: ld: warning: object file (/Users/djb/supercop-20210529/supercop-data/minimac/aarch64/lib/libkeccak.a(KeccakP-1600-opt64.o)) was built for newer macOS version (11.2) than being linked (11.0)
measure.c: ld: warning: could not create compact unwind for _KeccakP1600_AddBytes: registers 25 and 26 not saved contiguously in frame
measure.c: ld: warning: could not create compact unwind for _KeccakP1600_ExtractBytes: register 26 saved somewhere other than in frame
measure.c: ld: warning: could not create compact unwind for _KeccakF1600_FastLoop_Absorb: registers 27 and 28 not saved contiguously in frame
measure.c: ld: warning: could not create compact unwind for _KeccakP1600_12rounds_FastLoop_Absorb: registers 27 and 28 not saved contiguously in frame

Number of similar (compiler,implementation) pairs: 2, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:optimizedct/c T:ref

Compiler output

Implementation: T:optimizedct/neon
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

bitstream.c: In file included from bitstream.c:11:
bitstream.c: In file included from ./bitstream.h:15:
bitstream.c: In file included from ./mzd_additional.h:24:
bitstream.c: ./simd.h:146:17: error: argument to '__builtin_neon_vshlq_n_v' must be a constant integer
bitstream.c: vorrq_u64(mm128_shift_left(data[1], count), mm128_shift_right_64_127(data[0], 128 - count));
bitstream.c: ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
bitstream.c: ./simd.h:132:13: note: expanded from macro 'mm128_shift_left'
bitstream.c: vorrq_u64(mm128_sl_u64(data, count), mm128_sr_u64(vextq_u64(mm128_zero, data, 1), 64 - count))
bitstream.c: ^~~~~~~~~~~~~~~~~~~~~~~~~
bitstream.c: ./simd.h:114:30: note: expanded from macro 'mm128_sl_u64'
bitstream.c: (__builtin_constant_p(s) ? vshlq_n_u64((x), (s)) : vshlq_u64((x), vdupq_n_s64(s)))
bitstream.c: ^~~~~~~~~~~~~~~~~~~~~
bitstream.c: /Library/Developer/CommandLineTools/usr/lib/clang/12.0.5/include/arm_neon.h:24706:24: note: expanded from macro 'vshlq_n_u64'
bitstream.c: __ret = (uint64x2_t) __builtin_neon_vshlq_n_v((int8x16_t)__s0, __p1, 51); \
bitstream.c: ^ ~~~~
bitstream.c: In file included from bitstream.c:11:
bitstream.c: In file included from ./bitstream.h:15:
bitstream.c: In file included from ./mzd_additional.h:24:
bitstream.c: ./simd.h:146:17: error: argument to '__builtin_neon_vshrq_n_v' must be a constant integer
bitstream.c: vorrq_u64(mm128_shift_left(data[1], count), mm128_shift_right_64_127(data[0], 128 - count));
bitstream.c: ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
bitstream.c: ./simd.h:132:40: note: expanded from macro 'mm128_shift_left'
bitstream.c: vorrq_u64(mm128_sl_u64(data, count), mm128_sr_u64(vextq_u64(mm128_zero, data, 1), 64 - count))
bitstream.c: ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
bitstream.c: ./simd.h:116:30: note: expanded from macro 'mm128_sr_u64'
bitstream.c: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:optimizedct/neon