Implementation notes: aarch64, pi3bplus, crypto_kem/sikep610comp

Computer: pi3bplus
Microarchitecture: aarch64; A53 (410fd034)
Architecture: aarch64
CPU ID: 410fd034
SUPERCOP version: 20221122
Operation: crypto_kem
Primitive: sikep610comp

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
330613192	636980 0 16	653781 792 1568	`T:arm64asm`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221105	20221005
330972726	585608 0 16	604056 856 1584	`T:arm64asm`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221105	20221005
334289578	549108 0 16	566328 856 1568	`T:arm64asm`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221105	20221005
334337613	524536 0 16	540872 840 1552	`T:arm64asm`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221105	20221005
336722624	541124 0 16	558360 856 1568	`T:arm64asm`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221105	20221005
1499226952	593432 0 16	611952 872 1584	`T:arm64`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221105	20221005
1501952410	593432 0 16	611952 872 1584	`T:amd64`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221105	20221005
1635570110	667976 0 16	684725 808 1568	`T:amd64`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221105	20221005
1635787188	667976 0 16	684725 808 1568	`T:arm64`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221105	20221005
1964748148	549456 0 16	566720 872 1568	`T:arm64`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221105	20221005
1964982498	549456 0 16	566720 872 1568	`T:amd64`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221105	20221005
2519734858	541128 0 16	558400 872 1568	`T:arm64`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221105	20221005
2520142976	541128 0 16	558400 872 1568	`T:amd64`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221105	20221005
3391310444	521864 0 16	538248 856 1552	`T:arm64`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221105	20221005
3392896043	521864 0 16	538248 856 1552	`T:amd64`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221105	20221005

Compiler output

Implementation: T:arm64asm
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

fp_arm64.c: fp_arm64.c:71:5: warning: implicit declaration of function 'mp_shiftr1' is invalid in C99 [-Wimplicit-function-declaration]
fp_arm64.c: mp_shiftr1(c, NWORDS_FIELD);
fp_arm64.c: ^
fp_arm64.c: 1 warning generated.

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:arm64asm

Compiler output

Implementation: T:arm64asm
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

fp_arm64.c: fp_arm64.c: In function 'fpdiv2_610':
fp_arm64.c: fp_arm64.c:71:5: warning: implicit declaration of function 'mp_shiftr1' [-Wimplicit-function-declaration]
fp_arm64.c: mp_shiftr1(c, NWORDS_FIELD);
fp_arm64.c: ^~~~~~~~~~

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm64asm
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm64asm
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm64asm
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm64asm

Namespace violations

Implementation: T:amd64
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

P610_compressed.o A_basis_zero R
P610_compressed.o A_gen R
P610_compressed.o Alice_order R
P610_compressed.o B_basis_zero R
P610_compressed.o B_gen R
P610_compressed.o B_gen_3_tors R
P610_compressed.o Bob_order R
P610_compressed.o CompleteMPoint T
P610_compressed.o Double T
P610_compressed.o EphemeralKeyGeneration_A_SIDHp610_Compressed T
P610_compressed.o EphemeralKeyGeneration_B_SIDHp610_Compressed T
P610_compressed.o EphemeralSecretAgreement_A_SIDHp610_Compressed T
P610_compressed.o EphemeralSecretAgreement_B_SIDHp610_Compressed T
P610_compressed.o FormatPrivKey_B T
P610_compressed.o Ladder T
P610_compressed.o Montgomery_R R
P610_compressed.o Montgomery_R2 R
P610_compressed.o Montgomery_RB1 R
P610_compressed.o Montgomery_RB2 R
P610_compressed.o Montgomery_inversion_mod_order_bingcd T
P610_compressed.o Montgomery_multiply_mod_order T
P610_compressed.o Montgomery_neg T
P610_compressed.o Montgomery_one R
P610_compressed.o T_tate2_P R
P610_compressed.o T_tate2_Q R
P610_compressed.o T_tate2_firststep_P R
P610_compressed.o T_tate2_firststep_Q R
P610_compressed.o T_tate3 R
P610_compressed.o Tate2_pairings T
P610_compressed.o Tate3_pairings T
P610_compressed.o Traverse_w_div_e_fullsigned T
P610_compressed.o Traverse_w_div_e_torus T
P610_compressed.o Traverse_w_notdiv_e_fullsigned T
P610_compressed.o U3 R
P610_compressed.o XQB3 R
P610_compressed.o clear_words T
P610_compressed.o cmp_f2elm T
P610_compressed.o copy_words T
P610_compressed.o ct_cmov T
P610_compressed.o ct_compare T
P610_compressed.o cube_Fp2_cycl T
P610_compressed.o eval_2_isog T
P610_compressed.o eval_3_isog T
P610_compressed.o eval_4_isog T
P610_compressed.o fp2_conj T
P610_compressed.o fp2add610 T
P610_compressed.o fp2copy610 T
P610_compressed.o fp2correction610 T
P610_compressed.o fp2div2_610 T
P610_compressed.o fp2inv610_mont T
P610_compressed.o fp2inv610_mont_bingcd T
P610_compressed.o fp2mul610_mont T
P610_compressed.o fp2neg610 T
P610_compressed.o fp2shl T
P610_compressed.o fp2sqr610_mont T
P610_compressed.o fp2sub610 T
P610_compressed.o fp2zero610 T
P610_compressed.o fpcopy610 T
P610_compressed.o fpinv610_chain_mont T
P610_compressed.o fpinv610_mont T
P610_compressed.o fpinv610_mont_bingcd T
P610_compressed.o fpmul610_mont T
P610_compressed.o fpsqr610_mont T
P610_compressed.o fpzero610 T
P610_compressed.o from_Montgomery_mod_order T
P610_compressed.o from_base T
P610_compressed.o from_fp2mont T
P610_compressed.o from_mont T
P610_compressed.o fromproj T
P610_compressed.o g_R_S_im R
P610_compressed.o get_2_isog T
P610_compressed.o get_3_isog T
P610_compressed.o get_4_isog T
P610_compressed.o get_A T
P610_compressed.o highest_2t T
P610_compressed.o highest_t T
P610_compressed.o inv_3_way T
P610_compressed.o inv_Fp2_cycl_proj T
P610_compressed.o inv_mod_orderA T
P610_compressed.o is_sqr_fp2 T
P610_compressed.o j_inv T
P610_compressed.o mod T
P610_compressed.o mod3 T
P610_compressed.o mont_n_way_inv T
P610_compressed.o mp_add T
P610_compressed.o mp_shiftl1 T
P610_compressed.o mp_shiftleft T
P610_compressed.o mp_shiftr1 T
P610_compressed.o mp_sub T
P610_compressed.o mul3 T
P610_compressed.o mulmixed_montproj T
P610_compressed.o multiply T
P610_compressed.o ord2w_dlog T
P610_compressed.o ord2w_dloghyb T
P610_compressed.o p610 R
P610_compressed.o p610p1 R
P610_compressed.o p610x16p R
P610_compressed.o p610x2 R
P610_compressed.o p610x4 R
P610_compressed.o ph2_CT R
P610_compressed.o ph2_G R
P610_compressed.o ph2_Log R
P610_compressed.o ph2_Texp R
P610_compressed.o ph2_path R
P610_compressed.o ph3_T R
P610_compressed.o ph3_T1 B
P610_compressed.o ph3_T2 B
P610_compressed.o ph3_path R
P610_compressed.o random_mod_order_A_SIDHp610 T
P610_compressed.o random_mod_order_B_SIDHp610 T
P610_compressed.o recover_os T
P610_compressed.o reverse_bits T
P610_compressed.o solve_dlog T
P610_compressed.o sqr_Fp2_cycl T
P610_compressed.o sqr_Fp2_cycl_proj T
P610_compressed.o sqrt_Fp2 T
P610_compressed.o strat_Alice R
P610_compressed.o strat_Bob R
P610_compressed.o table_r_qnr R
P610_compressed.o table_r_qr R
P610_compressed.o table_v_qnr R
P610_compressed.o table_v_qr R
P610_compressed.o threeinv R
P610_compressed.o to_Montgomery_mod_order T
P610_compressed.o to_fp2mont T
P610_compressed.o to_mont T
P610_compressed.o toproj T
P610_compressed.o u_entang R
P610_compressed.o v_3_torsion R
P610_compressed.o validate_ciphertext T
P610_compressed.o xDBL T
P610_compressed.o xDBLADD T
P610_compressed.o xDBL_e T
P610_compressed.o xDBLe T
P610_compressed.o xTPL T
P610_compressed.o xTPL_fast T
P610_compressed.o xTPLe T
P610_compressed.o xTPLe_fast T
fips202.o KeccakF1600_StatePermute T
fips202.o shake128 T
fips202.o shake128_absorb T
fips202.o shake128_squeezeblocks T
fips202.o shake256 T
fips202.o shake256_absorb T
fips202.o shake256_squeezeblocks T
fp_generic.o digit_x_digit T
fp_generic.o fpadd610 T
fp_generic.o fpcorrection610 T
fp_generic.o fpdiv2_610 T
fp_generic.o fpneg610 T
fp_generic.o fpsub610 T
fp_generic.o mp_mul T
fp_generic.o mp_sub610_p2 T
fp_generic.o mp_sub610_p4 T
fp_generic.o rdc_mont T

Number of similar (compiler,implementation) pairs: 10, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:amd64
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:amd64
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:amd64
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:amd64
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:amd64
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:arm64
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm64
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm64
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm64
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm64

Namespace violations

Implementation: T:arm64asm
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

P610_compressed.o A_basis_zero R
P610_compressed.o A_gen R
P610_compressed.o Alice_order R
P610_compressed.o B_basis_zero R
P610_compressed.o B_gen R
P610_compressed.o B_gen_3_tors R
P610_compressed.o Bob_order R
P610_compressed.o CompleteMPoint T
P610_compressed.o Double T
P610_compressed.o EphemeralKeyGeneration_A_SIDHp610_Compressed T
P610_compressed.o EphemeralKeyGeneration_B_SIDHp610_Compressed T
P610_compressed.o EphemeralSecretAgreement_A_SIDHp610_Compressed T
P610_compressed.o EphemeralSecretAgreement_B_SIDHp610_Compressed T
P610_compressed.o FormatPrivKey_B T
P610_compressed.o Ladder T
P610_compressed.o Montgomery_R R
P610_compressed.o Montgomery_R2 R
P610_compressed.o Montgomery_RB1 R
P610_compressed.o Montgomery_RB2 R
P610_compressed.o Montgomery_inversion_mod_order_bingcd T
P610_compressed.o Montgomery_multiply_mod_order T
P610_compressed.o Montgomery_neg T
P610_compressed.o Montgomery_one R
P610_compressed.o T_tate2_P R
P610_compressed.o T_tate2_Q R
P610_compressed.o T_tate2_firststep_P R
P610_compressed.o T_tate2_firststep_Q R
P610_compressed.o T_tate3 R
P610_compressed.o Tate2_pairings T
P610_compressed.o Tate3_pairings T
P610_compressed.o Traverse_w_div_e_fullsigned T
P610_compressed.o Traverse_w_div_e_torus T
P610_compressed.o Traverse_w_notdiv_e_fullsigned T
P610_compressed.o U3 R
P610_compressed.o XQB3 R
P610_compressed.o clear_words T
P610_compressed.o cmp_f2elm T
P610_compressed.o copy_words T
P610_compressed.o ct_cmov T
P610_compressed.o ct_compare T
P610_compressed.o cube_Fp2_cycl T
P610_compressed.o eval_2_isog T
P610_compressed.o eval_3_isog T
P610_compressed.o eval_4_isog T
P610_compressed.o fp2_conj T
P610_compressed.o fp2add610 T
P610_compressed.o fp2copy610 T
P610_compressed.o fp2correction610 T
P610_compressed.o fp2div2_610 T
P610_compressed.o fp2inv610_mont T
P610_compressed.o fp2inv610_mont_bingcd T
P610_compressed.o fp2mul610_mont T
P610_compressed.o fp2neg610 T
P610_compressed.o fp2shl T
P610_compressed.o fp2sqr610_mont T
P610_compressed.o fp2sub610 T
P610_compressed.o fp2zero610 T
P610_compressed.o fpcopy610 T
P610_compressed.o fpinv610_chain_mont T
P610_compressed.o fpinv610_mont T
P610_compressed.o fpinv610_mont_bingcd T
P610_compressed.o fpmul610_mont T
P610_compressed.o fpsqr610_mont T
P610_compressed.o fpzero610 T
P610_compressed.o from_Montgomery_mod_order T
P610_compressed.o from_base T
P610_compressed.o from_fp2mont T
P610_compressed.o from_mont T
P610_compressed.o fromproj T
P610_compressed.o g_R_S_im R
P610_compressed.o get_2_isog T
P610_compressed.o get_3_isog T
P610_compressed.o get_4_isog T
P610_compressed.o get_A T
P610_compressed.o highest_2t T
P610_compressed.o highest_t T
P610_compressed.o inv_3_way T
P610_compressed.o inv_Fp2_cycl_proj T
P610_compressed.o inv_mod_orderA T
P610_compressed.o is_sqr_fp2 T
P610_compressed.o j_inv T
P610_compressed.o mod T
P610_compressed.o mod3 T
P610_compressed.o mont_n_way_inv T
P610_compressed.o mp_add T
P610_compressed.o mp_shiftl1 T
P610_compressed.o mp_shiftleft T
P610_compressed.o mp_shiftr1 T
P610_compressed.o mp_sub T
P610_compressed.o mul3 T
P610_compressed.o mulmixed_montproj T
P610_compressed.o multiply T
P610_compressed.o ord2w_dlog T
P610_compressed.o ord2w_dloghyb T
P610_compressed.o p610 R
P610_compressed.o p610p1 R
P610_compressed.o p610x16p R
P610_compressed.o p610x2 R
P610_compressed.o p610x4 R
P610_compressed.o ph2_CT R
P610_compressed.o ph2_G R
P610_compressed.o ph2_Log R
P610_compressed.o ph2_Texp R
P610_compressed.o ph2_path R
P610_compressed.o ph3_T R
P610_compressed.o ph3_T1 B
P610_compressed.o ph3_T2 B
P610_compressed.o ph3_path R
P610_compressed.o random_mod_order_A_SIDHp610 T
P610_compressed.o random_mod_order_B_SIDHp610 T
P610_compressed.o recover_os T
P610_compressed.o reverse_bits T
P610_compressed.o solve_dlog T
P610_compressed.o sqr_Fp2_cycl T
P610_compressed.o sqr_Fp2_cycl_proj T
P610_compressed.o sqrt_Fp2 T
P610_compressed.o strat_Alice R
P610_compressed.o strat_Bob R
P610_compressed.o table_r_qnr R
P610_compressed.o table_r_qr R
P610_compressed.o table_v_qnr R
P610_compressed.o table_v_qr R
P610_compressed.o threeinv R
P610_compressed.o to_Montgomery_mod_order T
P610_compressed.o to_fp2mont T
P610_compressed.o to_mont T
P610_compressed.o toproj T
P610_compressed.o u_entang R
P610_compressed.o v_3_torsion R
P610_compressed.o validate_ciphertext T
P610_compressed.o xDBL T
P610_compressed.o xDBLADD T
P610_compressed.o xDBL_e T
P610_compressed.o xDBLe T
P610_compressed.o xTPL T
P610_compressed.o xTPL_fast T
P610_compressed.o xTPLe T
P610_compressed.o xTPLe_fast T
fips202.o KeccakF1600_StatePermute T
fips202.o shake128 T
fips202.o shake128_absorb T
fips202.o shake128_squeezeblocks T
fips202.o shake256 T
fips202.o shake256_absorb T
fips202.o shake256_squeezeblocks T
fp_arm64.o fpadd610 T
fp_arm64.o fpcorrection610 T
fp_arm64.o fpdiv2_610 T
fp_arm64.o fpneg610 T
fp_arm64.o fpsub610 T
fp_arm64.o mp_mul T
fp_arm64.o mp_sub610_p2 T
fp_arm64.o mp_sub610_p4 T
fp_arm64.o rdc_mont T
fp_arm64_asm.o fpadd610_asm T
fp_arm64_asm.o fpsub610_asm T
fp_arm64_asm.o mp_add610_asm T
fp_arm64_asm.o mp_add610x2_asm T
fp_arm64_asm.o mp_dblsub610x2_asm T
fp_arm64_asm.o mp_sub610_p2_asm T
fp_arm64_asm.o mp_sub610_p4_asm T
fp_arm64_asm.o mp_subadd610x2_asm T
fp_arm64_asm.o mul610_asm T
fp_arm64_asm.o rdc610_asm T

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:arm64asm
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm64asm
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm64asm
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm64asm
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:arm64asm