Implementation notes: amd64, alder, crypto_aead/deoxysi256v141

Computer: alder
Microarchitecture: amd64; Golden Cove (90675-00)
Architecture: amd64
CPU ID: GenuineIntel-00090675-00-bfebfbff
SUPERCOP version: 20240625
Operation: crypto_aead
Primitive: deoxysi256v141

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
5742	32973 0 0	49360 780 1080	`T:aesni`	`gcc_-march=native_-mtune=native_-O3_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
5768	33367 0 0	48584 812 1048	`T:aesni`	`clang_-march=native_-O2_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
5848	33447 0 0	48824 812 1048	`T:aesni`	`clang_-march=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
5862	31899 0 0	46312 780 1080	`T:aesni`	`gcc_-march=native_-mtune=native_-O2_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
5918	29332 0 0	42203 756 1048	`T:aesni`	`gcc_-march=native_-mtune=native_-Os_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
5921	31559 0 0	45696 780 1080	`T:aesni`	`gcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
5977	32031 0 0	45254 804 1016	`T:aesni`	`clang_-march=native_-Os_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
6015	32342 0 0	45790 804 1016	`T:aesni`	`clang_-march=native_-O_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
6649	136391 0 0	152000 812 1048	`T:aesnis`	`clang_-march=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
6653	136391 0 0	151856 812 1048	`T:aesnis`	`clang_-march=native_-O2_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
6683	136356 0 0	149366 804 1016	`T:aesnis`	`clang_-march=native_-Os_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
6687	136461 0 0	149798 804 1016	`T:aesnis`	`clang_-march=native_-O_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
8479	124664 0 0	137531 756 1048	`T:aesnis`	`gcc_-march=native_-mtune=native_-Os_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
8936	134848 0 0	151296 780 1080	`T:aesnis`	`gcc_-march=native_-mtune=native_-O3_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
9081	134887 0 0	149336 780 1080	`T:aesnis`	`gcc_-march=native_-mtune=native_-O2_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
9616	130941 0 0	145104 780 1080	`T:aesnis`	`gcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
66434	101993 0 547	117136 812 1592	`T:bitslice`	`clang_-march=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
66496	101993 0 547	116992 812 1592	`T:bitslice`	`clang_-march=native_-O2_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
68124	118785 0 592	135224 780 1688	`T:bitslice`	`gcc_-march=native_-mtune=native_-O3_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
73641	102042 0 547	114630 804 1592	`T:bitslice`	`clang_-march=native_-Os_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
73765	103986 0 592	118432 780 1688	`T:bitslice`	`gcc_-march=native_-mtune=native_-O2_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
74751	162528 0 592	176696 780 1688	`T:bitslice`	`gcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
75535	103007 0 547	115982 804 1592	`T:bitslice`	`clang_-march=native_-O_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
84315	99210 0 592	112091 756 1656	`T:bitslice`	`gcc_-march=native_-mtune=native_-Os_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
111392	35054 0 547	51360 812 1592	`T:table`	`clang_-mcpu=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
112197	34822 0 547	51032 812 1592	`T:table`	`clang_-march=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
112459	34790 0 547	50856 812 1592	`T:table`	`clang_-march=native_-O2_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
114641	34170 0 547	47774 804 1592	`T:table`	`clang_-march=native_-Os_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
123385	35465 0 592	49936 780 1688	`T:table`	`gcc_-march=native_-mtune=native_-O2_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
129425	32890 0 592	45803 756 1656	`T:table`	`gcc_-march=native_-mtune=native_-Os_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
132009	36890 0 592	53352 780 1688	`T:table`	`gcc_-march=native_-mtune=native_-O3_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
132845	34390 0 592	48600 780 1688	`T:table`	`gcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
136331	33379 0 547	47382 804 1592	`T:table`	`clang_-march=native_-O_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
471391	24329 0 0	40424 812 1048	`T:ref`	`clang_-march=native_-O2_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
622268	26714 0 0	43056 812 1016	`T:ref`	`clang_-mcpu=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
655494	26393 0 0	42648 812 1048	`T:ref`	`clang_-march=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
678011	28915 0 0	45392 780 1080	`T:ref`	`gcc_-march=native_-mtune=native_-O3_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
1365828	25309 0 0	39800 780 1080	`T:ref`	`gcc_-march=native_-mtune=native_-O2_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
1923201	24175 0 0	37798 804 1016	`T:ref`	`clang_-march=native_-Os_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
2470687	22448 0 0	35363 756 1048	`T:ref`	`gcc_-march=native_-mtune=native_-Os_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
2482397	23828 0 0	38048 780 1080	`T:ref`	`gcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625
2578895	22852 0 0	36862 804 1016	`T:ref`	`clang_-march=native_-O_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240626	20240625

Compiler output

deoxys.c: deoxys.c:105:11: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'deoxys_aead_encrypt' that is compiled without support for 'ssse3'
deoxys.c:     tmp = permute( tmp, H_PERMUTATION );
deoxys.c:           ^
deoxys.c: ./tweakable-cipher.macros:7:22: note: expanded from macro 'permute'
deoxys.c: #define permute(a,b) _mm_shuffle_epi8(a,b)
deoxys.c:                      ^
deoxys.c: deoxys.c:112:5: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'deoxys_aead_encrypt' that is compiled without support for 'ssse3'
deoxys.c:     TWEAKEY_SCHEDULE3( tsubkeys1,tsubkeys2,subkeys, key);
deoxys.c:     ^
deoxys.c: ./tweakable-cipher.macros:40:3: note: expanded from macro 'TWEAKEY_SCHEDULE3'
deoxys.c:   ONE_KEY_ROUND( subkeys1[ 0], subkeys1[ 1], subkeys2[ 0], subkeys2[ 1] );      ts[ 1] = xor( xor(subkeys1[ 1],subkeys2[ 1]), RCONS[ 1] ); \
deoxys.c:   ^
deoxys.c: ./tweakable-cipher.macros:33:16: note: expanded from macro 'ONE_KEY_ROUND'
deoxys.c:     new_key1 = permute( new_key1, H_PERMUTATION);\
deoxys.c:                ^
deoxys.c: ./tweakable-cipher.macros:7:22: note: expanded from macro 'permute'
deoxys.c: #define permute(a,b) _mm_shuffle_epi8(a,b)
deoxys.c:                      ^
deoxys.c: deoxys.c:112:5: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'deoxys_aead_encrypt' that is compiled without support for 'ssse3'
deoxys.c: ./tweakable-cipher.macros:40:3: note: expanded from macro 'TWEAKEY_SCHEDULE3'
deoxys.c:   ONE_KEY_ROUND( subkeys1[ 0], subkeys1[ 1], subkeys2[ 0], subkeys2[ 1] );      ts[ 1] = xor( xor(subkeys1[ 1],subkeys2[ 1]), RCONS[ 1] ); \
deoxys.c:   ^
deoxys.c: ./tweakable-cipher.macros:34:16: note: expanded from macro 'ONE_KEY_ROUND'
deoxys.c:     new_key2 = permute( new_key2, H_PERMUTATION);
deoxys.c:                ^
deoxys.c: ...

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`T:aesni`	`clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_11.0.1)`

Compiler output

deoxys.c: deoxys.c:355:20: warning: variable 'Checksum' is uninitialized when used here [-Wuninitialized]
deoxys.c:     Checksum = xor(Checksum, Checksum);
deoxys.c:                    ^~~~~~~~
deoxys.c: ./tweakable-cipher.macros:5:32: note: expanded from macro 'xor'
deoxys.c: #define xor(a,b) _mm_xor_si128(a,b)
deoxys.c:                                ^
deoxys.c: deoxys.c:82:5: note: variable 'Checksum' is declared here
deoxys.c:     __m128i Checksum;
deoxys.c:     ^
deoxys.c: deoxys.c:99:16: warning: variable 'Auth' is uninitialized when used here [-Wuninitialized]
deoxys.c:     Auth = xor(Auth, Auth);
deoxys.c:                ^~~~
deoxys.c: ./tweakable-cipher.macros:5:32: note: expanded from macro 'xor'
deoxys.c: #define xor(a,b) _mm_xor_si128(a,b)
deoxys.c:                                ^
deoxys.c: deoxys.c:81:5: note: variable 'Auth' is declared here
deoxys.c:     __m128i Auth;
deoxys.c:     ^
deoxys.c: deoxys.c:100:17: warning: variable 'Tweak' is uninitialized when used here [-Wuninitialized]
deoxys.c:     Tweak = xor(Tweak, Tweak);
deoxys.c:                 ^~~~~
deoxys.c: ./tweakable-cipher.macros:5:32: note: expanded from macro 'xor'
deoxys.c: #define xor(a,b) _mm_xor_si128(a,b)
deoxys.c:                                ^
deoxys.c: deoxys.c:79:5: note: variable 'Tweak' is declared here
deoxys.c: ...

Number of similar (implementation,compiler) pairs: 5, namely:

Implementation	Compiler
`T:aesnis`	`clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_11.0.1)`
`T:aesnis`	`clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_11.0.1)`
`T:aesnis`	`clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_11.0.1)`
`T:aesnis`	`clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_11.0.1)`
`T:aesnis`	`clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_11.0.1)`

Compiler output

deoxys.c: In file included from deoxys.c:30:
deoxys.c: deoxys.c: In function 'deoxys_aead_encrypt':
deoxys.c: tweakable-cipher.macros:5:18: warning: 'Auth' is used uninitialized in this function [-Wuninitialized]
deoxys.c:     5 | #define xor(a,b) _mm_xor_si128(a,b)
deoxys.c:       |                  ^~~~~~~~~~~~~
deoxys.c: deoxys.c:81:13: note: 'Auth' was declared here
deoxys.c:    81 |     __m128i Auth;
deoxys.c:       |             ^~~~
deoxys.c: In file included from deoxys.c:30:
deoxys.c: tweakable-cipher.macros:5:18: warning: 'Tweak' is used uninitialized in this function [-Wuninitialized]
deoxys.c:     5 | #define xor(a,b) _mm_xor_si128(a,b)
deoxys.c:       |                  ^~~~~~~~~~~~~
deoxys.c: deoxys.c:79:13: note: 'Tweak' was declared here
deoxys.c:    79 |     __m128i Tweak;
deoxys.c:       |             ^~~~~
deoxys.c: In file included from deoxys.c:30:
deoxys.c: tweakable-cipher.macros:5:18: warning: 'Checksum' is used uninitialized in this function [-Wuninitialized]
deoxys.c:     5 | #define xor(a,b) _mm_xor_si128(a,b)
deoxys.c:       |                  ^~~~~~~~~~~~~
deoxys.c: deoxys.c:82:13: note: 'Checksum' was declared here
deoxys.c:    82 |     __m128i Checksum;
deoxys.c:       |             ^~~~~~~~
deoxys.c: In file included from deoxys.c:30:
deoxys.c: deoxys.c: In function 'deoxys_aead_decrypt':
deoxys.c: tweakable-cipher.macros:5:18: warning: 'Auth' is used uninitialized in this function [-Wuninitialized]
deoxys.c: ...

Number of similar (implementation,compiler) pairs: 4, namely:

Implementation	Compiler
`T:aesnis`	`gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (10.2.1_20210110)`
`T:aesnis`	`gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (10.2.1_20210110)`
`T:aesnis`	`gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (10.2.1_20210110)`
`T:aesnis`	`gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (10.2.1_20210110)`

Compiler output

deoxys256.c: deoxys256.c:249:18: warning: variable 'CHECKSUM' is uninitialized when used here [-Wuninitialized]
deoxys256.c:     CHECKSUM=XOR(CHECKSUM,CHECKSUM);
deoxys256.c:                  ^~~~~~~~
deoxys256.c: ./deoxysi256.macros:38:39: note: expanded from macro 'XOR'
deoxys256.c: #define XOR(a,b)        _mm_xor_si128(a,b)
deoxys256.c:                                       ^
deoxys256.c: deoxys256.c:159:5: note: variable 'CHECKSUM' is declared here
deoxys256.c:     __m128i CHECKSUM;
deoxys256.c:     ^
deoxys256.c: deoxys256.c:175:14: warning: variable 'AUTH' is uninitialized when used here [-Wuninitialized]
deoxys256.c:     AUTH=XOR(AUTH,AUTH);
deoxys256.c:              ^~~~
deoxys256.c: ./deoxysi256.macros:38:39: note: expanded from macro 'XOR'
deoxys256.c: #define XOR(a,b)        _mm_xor_si128(a,b)
deoxys256.c:                                       ^
deoxys256.c: deoxys256.c:158:5: note: variable 'AUTH' is declared here
deoxys256.c:     __m128i AUTH;
deoxys256.c:     ^
deoxys256.c: deoxys256.c:461:18: warning: variable 'CHECKSUM' is uninitialized when used here [-Wuninitialized]
deoxys256.c:     CHECKSUM=XOR(CHECKSUM,CHECKSUM);
deoxys256.c:                  ^~~~~~~~
deoxys256.c: ./deoxysi256.macros:38:39: note: expanded from macro 'XOR'
deoxys256.c: #define XOR(a,b)        _mm_xor_si128(a,b)
deoxys256.c:                                       ^
deoxys256.c: deoxys256.c:367:5: note: variable 'CHECKSUM' is declared here
deoxys256.c: ...

Number of similar (implementation,compiler) pairs: 4, namely:

Implementation	Compiler
`T:bitslice`	`clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_11.0.1)`
`T:bitslice`	`clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_11.0.1)`
`T:bitslice`	`clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_11.0.1)`
`T:bitslice`	`clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_11.0.1)`

Compiler output

deoxys256.c: deoxys256.c:249:18: warning: variable 'CHECKSUM' is uninitialized when used here [-Wuninitialized]
deoxys256.c:     CHECKSUM=XOR(CHECKSUM,CHECKSUM);
deoxys256.c:                  ^~~~~~~~
deoxys256.c: ./deoxysi256.macros:38:39: note: expanded from macro 'XOR'
deoxys256.c: #define XOR(a,b)        _mm_xor_si128(a,b)
deoxys256.c:                                       ^
deoxys256.c: deoxys256.c:159:5: note: variable 'CHECKSUM' is declared here
deoxys256.c:     __m128i CHECKSUM;
deoxys256.c:     ^
deoxys256.c: deoxys256.c:175:14: warning: variable 'AUTH' is uninitialized when used here [-Wuninitialized]
deoxys256.c:     AUTH=XOR(AUTH,AUTH);
deoxys256.c:              ^~~~
deoxys256.c: ./deoxysi256.macros:38:39: note: expanded from macro 'XOR'
deoxys256.c: #define XOR(a,b)        _mm_xor_si128(a,b)
deoxys256.c:                                       ^
deoxys256.c: deoxys256.c:158:5: note: variable 'AUTH' is declared here
deoxys256.c:     __m128i AUTH;
deoxys256.c:     ^
deoxys256.c: deoxys256.c:179:5: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'deoxys_aead_encrypt_8' that is compiled without support for 'ssse3'
deoxys256.c:     KEY_SCHEDULE(key, subkey);
deoxys256.c:     ^
deoxys256.c: ./deoxysi256.macros:79:5: note: expanded from macro 'KEY_SCHEDULE'
deoxys256.c:     packing(subkey1[0]);\
deoxys256.c:     ^
deoxys256.c: ./deoxysi256.macros:457:14: note: expanded from macro 'packing'
deoxys256.c: ...

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`T:bitslice`	`clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_11.0.1)`