Implementation notes: aarch64, pi3aplus, crypto_aead/ketjeminorv2

Computer: pi3aplus
Microarchitecture: aarch64; Cortex-A53 (410fd034)
Architecture: aarch64
CPU ID: 410fd034
SUPERCOP version: 20240425
Operation: crypto_aead
Primitive: ketjeminorv2

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
108913	7161 0 0	25368 864 864	`T:ARMv8A`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240427	20240425
108954	7137 0 0	24288 864 848	`T:ARMv8A`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240427	20240425
109663	6821 0 0	22904 848 840	`T:ARMv8A`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240427	20240425
109791	7057 0 0	24360 864 848	`T:ARMv8A`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240427	20240425
139809	9789 0 0	27965 768 856	`T:generic32`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240427	20240425
151582	12361 0 0	30525 768 856	`T:generic32lc`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240427	20240425
163637	11885 0 0	28880 864 848	`T:generic32lc`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240427	20240425
168074	10649 0 0	26752 848 840	`T:generic32lc`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240427	20240425
172032	10693 0 0	27688 864 848	`T:generic32`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240427	20240425
180484	9637 0 0	25736 848 840	`T:generic32`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240427	20240425
184681	13057 0 0	31248 864 864	`T:generic32lc`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240427	20240425
186816	12029 0 0	29160 864 848	`T:generic32lc`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240427	20240425
187005	11633 0 0	29824 864 864	`T:generic32`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240427	20240425
199017	10969 0 0	28096 864 848	`T:generic32`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240427	20240425
554297	9103 0 0	27296 864 864	`T:compact`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240427	20240425
834061	4437 0 0	20504 848 840	`T:compact`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240427	20240425
992085	4954 0 0	21936 864 848	`T:compact`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240427	20240425
1162988	4978 0 0	22112 864 848	`T:compact`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240427	20240425
15212829	76453 1192 47	88202 1880 944	`T:ref`	`g++_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240427	20240425
15885571	56019 1192 47	70511 1880 928	`T:ref`	`g++_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240427	20240425
29344016	40509 1192 47	55426 1824 888	`T:ref`	`g++_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240427	20240425
31540474	54161 1192 47	69155 1880 928	`T:ref`	`g++_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240427	20240425

Checksum failure

Implementation: T:compact
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

2dc4a33021c301540480716f43e636080b6952b1f02f54f2681cdc47476974b1

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:compact

Compiler output

Implementation: T:ARMv8A
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

KeccakP-800-armv8a-neon.s: <instantiation>:1:14: error: invalid operand for instruction
KeccakP-800-armv8a-neon.s: mov v0.2d[0], v22.2d[1]
KeccakP-800-armv8a-neon.s: ^
KeccakP-800-armv8a-neon.s: <instantiation>:73:5: note: while in macro instantiation
KeccakP-800-armv8a-neon.s: Chi v22, v23
KeccakP-800-armv8a-neon.s: ^
KeccakP-800-armv8a-neon.s: KeccakP-800-armv8a-neon.s:415:5: note: while in macro instantiation
KeccakP-800-armv8a-neon.s: KeccakRound
KeccakP-800-armv8a-neon.s: ^
KeccakP-800-armv8a-neon.s: <instantiation>:1:14: error: invalid operand for instruction
KeccakP-800-armv8a-neon.s: mov v0.2d[0], v24.2d[1]
KeccakP-800-armv8a-neon.s: ^
KeccakP-800-armv8a-neon.s: <instantiation>:74:5: note: while in macro instantiation
KeccakP-800-armv8a-neon.s: Chi v24, v25
KeccakP-800-armv8a-neon.s: ^
KeccakP-800-armv8a-neon.s: KeccakP-800-armv8a-neon.s:415:5: note: while in macro instantiation
KeccakP-800-armv8a-neon.s: KeccakRound
KeccakP-800-armv8a-neon.s: ^
KeccakP-800-armv8a-neon.s: <instantiation>:1:14: error: invalid operand for instruction
KeccakP-800-armv8a-neon.s: mov v0.2d[0], v26.2d[1]
KeccakP-800-armv8a-neon.s: ^
KeccakP-800-armv8a-neon.s: <instantiation>:75:5: note: while in macro instantiation
KeccakP-800-armv8a-neon.s: Chi v26, v27
KeccakP-800-armv8a-neon.s: ^
KeccakP-800-armv8a-neon.s: KeccakP-800-armv8a-neon.s:415:5: note: while in macro instantiation
KeccakP-800-armv8a-neon.s: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ARMv8A

Compiler output

Implementation: T:compact
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

KeccakP-800-compact.c: KeccakP-800-compact.c:27:36: warning: '/*' within block comment [-Wcomment]
KeccakP-800-compact.c: /* #define DIVISION_INSTRUCTION /* comment if no division instruction or more compact when not using division */
KeccakP-800-compact.c: ^
KeccakP-800-compact.c: 1 warning generated.

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:compact

Namespace violations

Implementation: T:ARMv8A
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

KeccakP-800-armv8a-neon.o KeccakP800_AddByte T
KeccakP-800-armv8a-neon.o KeccakP800_AddBytes T
KeccakP-800-armv8a-neon.o KeccakP800_ExtractAndAddBytes T
KeccakP-800-armv8a-neon.o KeccakP800_ExtractBytes T
KeccakP-800-armv8a-neon.o KeccakP800_Initialize T
KeccakP-800-armv8a-neon.o KeccakP800_OverwriteBytes T
KeccakP-800-armv8a-neon.o KeccakP800_OverwriteWithZeroes T
KeccakP-800-armv8a-neon.o KeccakP800_Permute T
KeccakP-800-armv8a-neon.o KeccakP800_Permute_12rounds T
KeccakP-800-armv8a-neon.o KeccakP800_Permute_22rounds T
KeccakP-800-armv8a-neon.o KeccakP800_Permute_Nrounds T
KetMn.o KetMn_FeedAssociatedDataBlocks T
KetMn.o KetMn_StateAddByte T
KetMn.o KetMn_StateExtractByte T
KetMn.o KetMn_StateOverwrite T
KetMn.o KetMn_StateTwistIndexes R
KetMn.o KetMn_Step T
KetMn.o KetMn_UnwrapBlocks T
KetMn.o KetMn_WrapBlocks T
KetjeMn.o KetjeMn_FeedAssociatedData T
KetjeMn.o KetjeMn_GetTag T
KetjeMn.o KetjeMn_Initialize T
KetjeMn.o KetjeMn_UnwrapCiphertext T
KetjeMn.o KetjeMn_WrapPlaintext T

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ARMv8A
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ARMv8A
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ARMv8A
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ARMv8A

Namespace violations

Implementation: T:compact
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

KeccakP-800-compact.o KeccakP800_AddByte T
KeccakP-800-compact.o KeccakP800_AddBytes T
KeccakP-800-compact.o KeccakP800_ExtractAndAddBytes T
KeccakP-800-compact.o KeccakP800_ExtractBytes T
KeccakP-800-compact.o KeccakP800_Initialize T
KeccakP-800-compact.o KeccakP800_Mod5 R
KeccakP-800-compact.o KeccakP800_OverwriteBytes T
KeccakP-800-compact.o KeccakP800_OverwriteWithZeroes T
KeccakP-800-compact.o KeccakP800_Permute_12rounds T
KeccakP-800-compact.o KeccakP800_Permute_22rounds T
KeccakP-800-compact.o KeccakP800_Permute_Nrounds T
KeccakP-800-compact.o KeccakP800_PiLane R
KeccakP-800-compact.o KeccakP800_RotationConstants R
KetMn.o KetMn_FeedAssociatedDataBlocks T
KetMn.o KetMn_StateAddByte T
KetMn.o KetMn_StateExtractByte T
KetMn.o KetMn_StateOverwrite T
KetMn.o KetMn_StateTwistIndexes R
KetMn.o KetMn_Step T
KetMn.o KetMn_UnwrapBlocks T
KetMn.o KetMn_WrapBlocks T
KetjeMn.o KetjeMn_FeedAssociatedData T
KetjeMn.o KetjeMn_GetTag T
KetjeMn.o KetjeMn_Initialize T
KetjeMn.o KetjeMn_UnwrapCiphertext T
KetjeMn.o KetjeMn_WrapPlaintext T

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:compact
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:compact
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:compact
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:compact

Namespace violations

Implementation: T:generic32
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

KeccakP-800-opt32.o KeccakF800RoundConstants R
KeccakP-800-opt32.o KeccakF800_FastLoop_Absorb T
KeccakP-800-opt32.o KeccakP800_AddByte T
KeccakP-800-opt32.o KeccakP800_AddBytes T
KeccakP-800-opt32.o KeccakP800_ExtractAndAddBytes T
KeccakP-800-opt32.o KeccakP800_ExtractBytes T
KeccakP-800-opt32.o KeccakP800_Initialize T
KeccakP-800-opt32.o KeccakP800_OverwriteBytes T
KeccakP-800-opt32.o KeccakP800_OverwriteWithZeroes T
KeccakP-800-opt32.o KeccakP800_Permute_12rounds T
KeccakP-800-opt32.o KeccakP800_Permute_22rounds T
KeccakP-800-opt32.o KeccakP800_Permute_Nrounds T
KetMn.o KetMn_FeedAssociatedDataBlocks T
KetMn.o KetMn_StateAddByte T
KetMn.o KetMn_StateExtractByte T
KetMn.o KetMn_StateOverwrite T
KetMn.o KetMn_StateTwistIndexes R
KetMn.o KetMn_Step T
KetMn.o KetMn_UnwrapBlocks T
KetMn.o KetMn_WrapBlocks T
KetjeMn.o KetjeMn_FeedAssociatedData T
KetjeMn.o KetjeMn_GetTag T
KetjeMn.o KetjeMn_Initialize T
KetjeMn.o KetjeMn_UnwrapCiphertext T
KetjeMn.o KetjeMn_WrapPlaintext T

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:generic32
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:generic32
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:generic32
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:generic32
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:generic32

Namespace violations

Implementation: T:generic32lc
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

KeccakP-800-opt32.o KeccakF800RoundConstants R
KeccakP-800-opt32.o KeccakF800_FastLoop_Absorb T
KeccakP-800-opt32.o KeccakP800LaneComplement R
KeccakP-800-opt32.o KeccakP800_AddByte T
KeccakP-800-opt32.o KeccakP800_AddBytes T
KeccakP-800-opt32.o KeccakP800_ExtractAndAddBytes T
KeccakP-800-opt32.o KeccakP800_ExtractBytes T
KeccakP-800-opt32.o KeccakP800_Initialize T
KeccakP-800-opt32.o KeccakP800_OverwriteBytes T
KeccakP-800-opt32.o KeccakP800_OverwriteWithZeroes T
KeccakP-800-opt32.o KeccakP800_Permute_12rounds T
KeccakP-800-opt32.o KeccakP800_Permute_22rounds T
KeccakP-800-opt32.o KeccakP800_Permute_Nrounds T
KetMn.o KetMn_FeedAssociatedDataBlocks T
KetMn.o KetMn_StateAddByte T
KetMn.o KetMn_StateExtractByte T
KetMn.o KetMn_StateOverwrite T
KetMn.o KetMn_StateTwistIndexes R
KetMn.o KetMn_Step T
KetMn.o KetMn_UnwrapBlocks T
KetMn.o KetMn_WrapBlocks T
KetjeMn.o KetjeMn_FeedAssociatedData T
KetjeMn.o KetjeMn_GetTag T
KetjeMn.o KetjeMn_Initialize T
KetjeMn.o KetjeMn_UnwrapCiphertext T
KetjeMn.o KetjeMn_WrapPlaintext T

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:generic32lc
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:generic32lc
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:generic32lc
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:generic32lc
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:generic32lc