Implementation notes: aarch64, pi3bplus, crypto_aead/ketjemajorv2

Computer: pi3bplus
Microarchitecture: aarch64; A53 (410fd034)
Architecture: aarch64
CPU ID: 410fd034
SUPERCOP version: 20221122
Operation: crypto_aead
Primitive: ketjemajorv2

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
64868	7073 0 0	24120 864 848	`T:ARMv8A`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200831	20200826
64885	7097 0 0	25456 864 864	`T:ARMv8A`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200831	20200826
65098	6765 0 0	22992 848 840	`T:ARMv8A`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200831	20200826
65391	7001 0 0	24192 864 848	`T:ARMv8A`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200831	20200826
132417	44025 0 0	62485 768 856	`T:generic64`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20200831	20200826
137760	47281 0 0	65544 864 864	`T:generic64`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200831	20200826
141062	45497 0 0	63957 768 856	`T:generic64lc`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20200831	20200826
146915	48433 0 0	66696 864 864	`T:generic64lc`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200831	20200826
150930	45445 0 0	62512 864 848	`T:generic64`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200831	20200826
163069	45229 0 0	62296 864 848	`T:generic64lc`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200831	20200826
172702	42873 0 0	59152 848 840	`T:generic64`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200831	20200826
180478	43441 0 0	59744 848 840	`T:generic64lc`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200831	20200826
182965	54309 0 0	71512 864 848	`T:generic64`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200831	20200826
189470	53749 0 0	70952 864 848	`T:generic64lc`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200831	20200826
282943	6137 0 0	24581 768 856	`T:compact`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20200831	20200826
299840	11839 0 0	30104 864 864	`T:compact`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200831	20200826
330342	19437 0 0	37893 768 856	`T:generic32`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20200831	20200826
345951	22289 0 0	40576 864 864	`T:generic32`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200831	20200826
350546	14177 0 0	30480 848 840	`T:generic32`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200831	20200826
360731	17693 0 0	34760 864 848	`T:generic32`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200831	20200826
426675	15821 0 0	33040 864 848	`T:generic32`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200831	20200826
463366	6326 0 0	23392 864 848	`T:compact`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200831	20200826
774549	6422 0 0	23648 864 848	`T:compact`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200831	20200826
946133	5621 0 0	21936 848 840	`T:compact`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200831	20200826
8690285	56019 1192 47	70503 1880 928	`T:ref`	`g++_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200831	20200826
8939869	76393 1192 47	88114 1880 944	`T:ref`	`g++_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200831	20200826
16539247	40509 1192 47	55578 1824 888	`T:ref`	`g++_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200831	20200826
18130340	54161 1192 47	69163 1880 928	`T:ref`	`g++_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20200831	20200826

Compiler output

Implementation: T:ARMv8A
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

KeccakP-1600-armv8a-neon.s: <instantiation>:18:18: error: invalid operand for instruction
KeccakP-1600-armv8a-neon.s: mov v5.2d[0], v0.2d[1] // v5 = (A[4] ^ A[14]) || ????
KeccakP-1600-armv8a-neon.s: ^
KeccakP-1600-armv8a-neon.s: KeccakP-1600-armv8a-neon.s:524:5: note: while in macro instantiation
KeccakP-1600-armv8a-neon.s: KeccakRound
KeccakP-1600-armv8a-neon.s: ^
KeccakP-1600-armv8a-neon.s: <instantiation>:23:18: error: invalid operand for instruction
KeccakP-1600-armv8a-neon.s: mov v4.2d[1], v3.2d[0] // v4 = B[4] || B[3]
KeccakP-1600-armv8a-neon.s: ^
KeccakP-1600-armv8a-neon.s: KeccakP-1600-armv8a-neon.s:524:5: note: while in macro instantiation
KeccakP-1600-armv8a-neon.s: KeccakRound
KeccakP-1600-armv8a-neon.s: ^
KeccakP-1600-armv8a-neon.s: <instantiation>:57:18: error: invalid operand for instruction
KeccakP-1600-armv8a-neon.s: mov x11, v20.2d[0] // x11 = A[1]
KeccakP-1600-armv8a-neon.s: ^
KeccakP-1600-armv8a-neon.s: KeccakP-1600-armv8a-neon.s:524:5: note: while in macro instantiation
KeccakP-1600-armv8a-neon.s: KeccakRound
KeccakP-1600-armv8a-neon.s: ^
KeccakP-1600-armv8a-neon.s: <instantiation>:2:18: error: invalid operand for instruction
KeccakP-1600-armv8a-neon.s: mov x10, v25.2d[0]
KeccakP-1600-armv8a-neon.s: ^
KeccakP-1600-armv8a-neon.s: <instantiation>:59:5: note: while in macro instantiation
KeccakP-1600-armv8a-neon.s: RhoPi v25.2d[0], x11, x10, 1 // A[10] = ROTL64(A[1], 1)
KeccakP-1600-armv8a-neon.s: ^
KeccakP-1600-armv8a-neon.s: KeccakP-1600-armv8a-neon.s:524:5: note: while in macro instantiation
KeccakP-1600-armv8a-neon.s: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ARMv8A

Namespace violations

Implementation: T:ARMv8A
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

KeccakP-1600-armv8a-neon.o KeccakP1600_AddByte T
KeccakP-1600-armv8a-neon.o KeccakP1600_AddBytes T
KeccakP-1600-armv8a-neon.o KeccakP1600_ExtractAndAddBytes T
KeccakP-1600-armv8a-neon.o KeccakP1600_ExtractBytes T
KeccakP-1600-armv8a-neon.o KeccakP1600_Initialize T
KeccakP-1600-armv8a-neon.o KeccakP1600_OverwriteBytes T
KeccakP-1600-armv8a-neon.o KeccakP1600_OverwriteWithZeroes T
KeccakP-1600-armv8a-neon.o KeccakP1600_Permute T
KeccakP-1600-armv8a-neon.o KeccakP1600_Permute_12rounds T
KeccakP-1600-armv8a-neon.o KeccakP1600_Permute_24rounds T
KeccakP-1600-armv8a-neon.o KeccakP1600_Permute_Nrounds T
KetMj.o KetMj_FeedAssociatedDataBlocks T
KetMj.o KetMj_StateAddByte T
KetMj.o KetMj_StateExtractByte T
KetMj.o KetMj_StateOverwrite T
KetMj.o KetMj_StateTwistIndexes R
KetMj.o KetMj_Step T
KetMj.o KetMj_UnwrapBlocks T
KetMj.o KetMj_WrapBlocks T
KetjeMj.o KetjeMj_FeedAssociatedData T
KetjeMj.o KetjeMj_GetTag T
KetjeMj.o KetjeMj_Initialize T
KetjeMj.o KetjeMj_UnwrapCiphertext T
KetjeMj.o KetjeMj_WrapPlaintext T

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ARMv8A
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ARMv8A
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ARMv8A
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ARMv8A

Namespace violations

Implementation: T:compact
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

KeccakP-1600-compact64.o KeccakP1600_AddByte T
KeccakP-1600-compact64.o KeccakP1600_AddBytes T
KeccakP-1600-compact64.o KeccakP1600_AddBytesInLane T
KeccakP-1600-compact64.o KeccakP1600_AddLanes T
KeccakP-1600-compact64.o KeccakP1600_ExtractAndAddBytes T
KeccakP-1600-compact64.o KeccakP1600_ExtractAndAddBytesInLane T
KeccakP-1600-compact64.o KeccakP1600_ExtractAndAddLanes T
KeccakP-1600-compact64.o KeccakP1600_ExtractBytes T
KeccakP-1600-compact64.o KeccakP1600_ExtractBytesInLane T
KeccakP-1600-compact64.o KeccakP1600_ExtractLanes T
KeccakP-1600-compact64.o KeccakP1600_Initialize T
KeccakP-1600-compact64.o KeccakP1600_Mod5 R
KeccakP-1600-compact64.o KeccakP1600_OverwriteBytes T
KeccakP-1600-compact64.o KeccakP1600_OverwriteBytesInLane T
KeccakP-1600-compact64.o KeccakP1600_OverwriteLanes T
KeccakP-1600-compact64.o KeccakP1600_OverwriteWithZeroes T
KeccakP-1600-compact64.o KeccakP1600_Permute_12rounds T
KeccakP-1600-compact64.o KeccakP1600_Permute_24rounds T
KeccakP-1600-compact64.o KeccakP1600_Permute_Nrounds T
KeccakP-1600-compact64.o KeccakP1600_PiLane R
KeccakP-1600-compact64.o KeccakP1600_RotationConstants R
KetMj.o KetMj_FeedAssociatedDataBlocks T
KetMj.o KetMj_StateAddByte T
KetMj.o KetMj_StateExtractByte T
KetMj.o KetMj_StateOverwrite T
KetMj.o KetMj_StateTwistIndexes R
KetMj.o KetMj_Step T
KetMj.o KetMj_UnwrapBlocks T
KetMj.o KetMj_WrapBlocks T
KetjeMj.o KetjeMj_FeedAssociatedData T
KetjeMj.o KetjeMj_GetTag T
KetjeMj.o KetjeMj_Initialize T
KetjeMj.o KetjeMj_UnwrapCiphertext T
KetjeMj.o KetjeMj_WrapPlaintext T

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:compact
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:compact
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:compact
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:compact
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:compact

Namespace violations

Implementation: T:generic32
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

KeccakP-1600-inplace32BI.o KeccakP1600_AddByte T
KeccakP-1600-inplace32BI.o KeccakP1600_AddBytes T
KeccakP-1600-inplace32BI.o KeccakP1600_AddBytesInLane T
KeccakP-1600-inplace32BI.o KeccakP1600_AddLanes T
KeccakP-1600-inplace32BI.o KeccakP1600_ExtractAndAddBytes T
KeccakP-1600-inplace32BI.o KeccakP1600_ExtractAndAddBytesInLane T
KeccakP-1600-inplace32BI.o KeccakP1600_ExtractAndAddLanes T
KeccakP-1600-inplace32BI.o KeccakP1600_ExtractBytes T
KeccakP-1600-inplace32BI.o KeccakP1600_ExtractBytesInLane T
KeccakP-1600-inplace32BI.o KeccakP1600_ExtractLanes T
KeccakP-1600-inplace32BI.o KeccakP1600_Initialize T
KeccakP-1600-inplace32BI.o KeccakP1600_OverwriteBytes T
KeccakP-1600-inplace32BI.o KeccakP1600_OverwriteBytesInLane T
KeccakP-1600-inplace32BI.o KeccakP1600_OverwriteLanes T
KeccakP-1600-inplace32BI.o KeccakP1600_OverwriteWithZeroes T
KeccakP-1600-inplace32BI.o KeccakP1600_Permute_12rounds T
KeccakP-1600-inplace32BI.o KeccakP1600_Permute_24rounds T
KeccakP-1600-inplace32BI.o KeccakP1600_Permute_Nrounds T
KeccakP-1600-inplace32BI.o KeccakP1600_SetBytesInLaneToZero T
KetMj.o KetMj_FeedAssociatedDataBlocks T
KetMj.o KetMj_StateAddByte T
KetMj.o KetMj_StateExtractByte T
KetMj.o KetMj_StateOverwrite T
KetMj.o KetMj_StateTwistIndexes R
KetMj.o KetMj_Step T
KetMj.o KetMj_UnwrapBlocks T
KetMj.o KetMj_WrapBlocks T
KetjeMj.o KetjeMj_FeedAssociatedData T
KetjeMj.o KetjeMj_GetTag T
KetjeMj.o KetjeMj_Initialize T
KetjeMj.o KetjeMj_UnwrapCiphertext T
KetjeMj.o KetjeMj_WrapPlaintext T

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:generic32
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:generic32
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:generic32
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:generic32
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:generic32

Namespace violations

Implementation: T:generic64
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

KeccakP-1600-opt64.o KeccakF1600_FastLoop_Absorb T
KeccakP-1600-opt64.o KeccakP1600_AddBytes T
KeccakP-1600-opt64.o KeccakP1600_AddBytesInLane T
KeccakP-1600-opt64.o KeccakP1600_AddLanes T
KeccakP-1600-opt64.o KeccakP1600_ExtractAndAddBytes T
KeccakP-1600-opt64.o KeccakP1600_ExtractAndAddBytesInLane T
KeccakP-1600-opt64.o KeccakP1600_ExtractAndAddLanes T
KeccakP-1600-opt64.o KeccakP1600_ExtractBytes T
KeccakP-1600-opt64.o KeccakP1600_ExtractBytesInLane T
KeccakP-1600-opt64.o KeccakP1600_ExtractLanes T
KeccakP-1600-opt64.o KeccakP1600_Initialize T
KeccakP-1600-opt64.o KeccakP1600_OverwriteBytes T
KeccakP-1600-opt64.o KeccakP1600_OverwriteBytesInLane T
KeccakP-1600-opt64.o KeccakP1600_OverwriteLanes T
KeccakP-1600-opt64.o KeccakP1600_OverwriteWithZeroes T
KeccakP-1600-opt64.o KeccakP1600_Permute_12rounds T
KeccakP-1600-opt64.o KeccakP1600_Permute_24rounds T
KeccakP-1600-opt64.o KeccakP1600_Permute_Nrounds T
KetMj.o KetMj_FeedAssociatedDataBlocks T
KetMj.o KetMj_StateAddByte T
KetMj.o KetMj_StateExtractByte T
KetMj.o KetMj_StateOverwrite T
KetMj.o KetMj_StateTwistIndexes R
KetMj.o KetMj_Step T
KetMj.o KetMj_UnwrapBlocks T
KetMj.o KetMj_WrapBlocks T
KetjeMj.o KetjeMj_FeedAssociatedData T
KetjeMj.o KetjeMj_GetTag T
KetjeMj.o KetjeMj_Initialize T
KetjeMj.o KetjeMj_UnwrapCiphertext T
KetjeMj.o KetjeMj_WrapPlaintext T

Number of similar (compiler,implementation) pairs: 10, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:generic64
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:generic64
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:generic64
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:generic64
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:generic64
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:generic64lc
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:generic64lc
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:generic64lc
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:generic64lc
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:generic64lc