Implementation notes: aarch64, pi3aplus, crypto_kem/sikep751

Computer: pi3aplus
Microarchitecture: aarch64; Cortex-A53 (410fd034)
Architecture: aarch64
CPU ID: 410fd034
SUPERCOP version: 20240107
Operation: crypto_kem
Primitive: sikep751

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
419807644	88636 0 0	105477 792 1552	`T:arm64asm`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240107	20231212
420767556	57476 0 0	75456 856 1568	`T:arm64asm`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240107	20231212
421603396	34612 0 0	51368 856 1552	`T:arm64asm`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240107	20231212
423607285	33172 0 0	49872 856 1552	`T:arm64asm`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240107	20231212
423883844	28900 0 0	44664 840 1536	`T:arm64asm`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240107	20231212
1958078792	109988 0 0	128032 872 1568	`T:arm64`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240107	20231212
1958188376	109988 0 0	128032 872 1568	`T:amd64`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240107	20231212
2133595316	90044 0 0	106885 808 1552	`T:arm64`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240107	20231212
2133667470	90044 0 0	106885 808 1552	`T:amd64`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20240107	20231212
2575017110	36256 0 0	53056 872 1552	`T:arm64`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240107	20231212
2575279948	36256 0 0	53056 872 1552	`T:amd64`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240107	20231212
3292111626	35472 0 0	52216 872 1552	`T:arm64`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240107	20231212
3292117738	35472 0 0	52216 872 1552	`T:amd64`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240107	20231212
4316719278	23904 0 0	39720 856 1536	`T:arm64`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240107	20231212
4317147514	23904 0 0	39720 856 1536	`T:amd64`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20240107	20231212

Test failure

Implementation: T:ref
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

error 142
Alarm clock

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref

Compiler output

Implementation: T:arm64asm
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

fp_arm64.c: fp_arm64.c:71:5: warning: implicit declaration of function 'mp_shiftr1' is invalid in C99 [-Wimplicit-function-declaration]
fp_arm64.c: mp_shiftr1(c, NWORDS_FIELD);
fp_arm64.c: ^
fp_arm64.c: 1 warning generated.

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:arm64asm

Compiler output

Implementation: T:arm64asm
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

fp_arm64.c: fp_arm64.c: In function 'fpdiv2_751':
fp_arm64.c: fp_arm64.c:71:5: warning: implicit declaration of function 'mp_shiftr1' [-Wimplicit-function-declaration]
fp_arm64.c: mp_shiftr1(c, NWORDS_FIELD);
fp_arm64.c: ^~~~~~~~~~

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm64asm
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm64asm
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm64asm
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm64asm

Namespace violations

Implementation: T:amd64
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

P751.o A_gen R
P751.o Alice_order R
P751.o B_gen R
P751.o Bob_order R
P751.o EphemeralKeyGeneration_A_SIDHp751 T
P751.o EphemeralKeyGeneration_B_SIDHp751 T
P751.o EphemeralSecretAgreement_A_SIDHp751 T
P751.o EphemeralSecretAgreement_B_SIDHp751 T
P751.o Montgomery_R2 R
P751.o Montgomery_one R
P751.o clear_words T
P751.o copy_words T
P751.o ct_cmov T
P751.o ct_compare T
P751.o eval_3_isog T
P751.o eval_4_isog T
P751.o fp2add751 T
P751.o fp2copy751 T
P751.o fp2correction751 T
P751.o fp2div2_751 T
P751.o fp2inv751_mont T
P751.o fp2mul751_mont T
P751.o fp2neg751 T
P751.o fp2sqr751_mont T
P751.o fp2sub751 T
P751.o fp2zero751 T
P751.o fpcopy751 T
P751.o fpinv751_chain_mont T
P751.o fpinv751_mont T
P751.o fpmul751_mont T
P751.o fpsqr751_mont T
P751.o fpzero751 T
P751.o from_fp2mont T
P751.o from_mont T
P751.o get_3_isog T
P751.o get_4_isog T
P751.o get_A T
P751.o inv_3_way T
P751.o j_inv T
P751.o mp_add T
P751.o mp_shiftl1 T
P751.o mp_shiftleft T
P751.o mp_shiftr1 T
P751.o mp_sub T
P751.o p751 R
P751.o p751p1 R
P751.o p751x16p R
P751.o p751x2 R
P751.o p751x4 R
P751.o random_mod_order_A_SIDHp751 T
P751.o random_mod_order_B_SIDHp751 T
P751.o strat_Alice R
P751.o strat_Bob R
P751.o to_fp2mont T
P751.o to_mont T
P751.o xDBL T
P751.o xDBLADD T
P751.o xDBLe T
P751.o xTPL T
P751.o xTPLe T
fips202.o KeccakF1600_StatePermute T
fips202.o shake128 T
fips202.o shake128_absorb T
fips202.o shake128_squeezeblocks T
fips202.o shake256 T
fips202.o shake256_absorb T
fips202.o shake256_squeezeblocks T
fp_generic.o digit_x_digit T
fp_generic.o fpadd751 T
fp_generic.o fpcorrection751 T
fp_generic.o fpdiv2_751 T
fp_generic.o fpneg751 T
fp_generic.o fpsub751 T
fp_generic.o mp_mul T
fp_generic.o mp_sub751_p2 T
fp_generic.o mp_sub751_p4 T
fp_generic.o rdc_mont T

Number of similar (compiler,implementation) pairs: 10, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:amd64
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:amd64
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:amd64
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:amd64
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:amd64
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:arm64
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm64
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm64
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm64
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm64

Namespace violations

Implementation: T:arm64asm
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

P751.o A_gen R
P751.o Alice_order R
P751.o B_gen R
P751.o Bob_order R
P751.o EphemeralKeyGeneration_A_SIDHp751 T
P751.o EphemeralKeyGeneration_B_SIDHp751 T
P751.o EphemeralSecretAgreement_A_SIDHp751 T
P751.o EphemeralSecretAgreement_B_SIDHp751 T
P751.o Montgomery_R2 R
P751.o Montgomery_one R
P751.o clear_words T
P751.o copy_words T
P751.o ct_cmov T
P751.o ct_compare T
P751.o eval_3_isog T
P751.o eval_4_isog T
P751.o fp2add751 T
P751.o fp2copy751 T
P751.o fp2correction751 T
P751.o fp2div2_751 T
P751.o fp2inv751_mont T
P751.o fp2mul751_mont T
P751.o fp2neg751 T
P751.o fp2sqr751_mont T
P751.o fp2sub751 T
P751.o fp2zero751 T
P751.o fpcopy751 T
P751.o fpinv751_chain_mont T
P751.o fpinv751_mont T
P751.o fpmul751_mont T
P751.o fpsqr751_mont T
P751.o fpzero751 T
P751.o from_fp2mont T
P751.o from_mont T
P751.o get_3_isog T
P751.o get_4_isog T
P751.o get_A T
P751.o inv_3_way T
P751.o j_inv T
P751.o mp_add T
P751.o mp_shiftl1 T
P751.o mp_shiftleft T
P751.o mp_shiftr1 T
P751.o mp_sub T
P751.o p751 R
P751.o p751p1 R
P751.o p751x16p R
P751.o p751x2 R
P751.o p751x4 R
P751.o random_mod_order_A_SIDHp751 T
P751.o random_mod_order_B_SIDHp751 T
P751.o strat_Alice R
P751.o strat_Bob R
P751.o to_fp2mont T
P751.o to_mont T
P751.o xDBL T
P751.o xDBLADD T
P751.o xDBLe T
P751.o xTPL T
P751.o xTPLe T
fips202.o KeccakF1600_StatePermute T
fips202.o shake128 T
fips202.o shake128_absorb T
fips202.o shake128_squeezeblocks T
fips202.o shake256 T
fips202.o shake256_absorb T
fips202.o shake256_squeezeblocks T
fp_arm64.o fpadd751 T
fp_arm64.o fpcorrection751 T
fp_arm64.o fpdiv2_751 T
fp_arm64.o fpneg751 T
fp_arm64.o fpsub751 T
fp_arm64.o mp_mul T
fp_arm64.o mp_sub751_p2 T
fp_arm64.o mp_sub751_p4 T
fp_arm64.o rdc_mont T
fp_arm64_asm.o fpadd751_asm T
fp_arm64_asm.o fpsub751_asm T
fp_arm64_asm.o mp_add751_asm T
fp_arm64_asm.o mp_add751x2_asm T
fp_arm64_asm.o mp_dblsub751x2_asm T
fp_arm64_asm.o mp_sub751_p2_asm T
fp_arm64_asm.o mp_sub751_p4_asm T
fp_arm64_asm.o mp_subadd751x2_asm T
fp_arm64_asm.o mul751_asm T
fp_arm64_asm.o rdc751_asm T

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:arm64asm
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm64asm
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm64asm
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm64asm
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm64asm