Implementation notes: amd64, bolero, crypto_aead/deoxyseq256128v1

Computer: bolero
Microarchitecture: amd64; Broadwell+AES (406f1)
Architecture: amd64
CPU ID: GenuineIntel-000406f1-1fc9cbf5
SUPERCOP version: 20240625
Operation: crypto_aead
Primitive: deoxyseq256128v1
TimeObject sizeTest sizeImplementationCompilerBenchmark dateSUPERCOP version
1476062357 0 084572 816 872T:optclang_-march=native_-O2_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024062620240625
1476062437 0 084964 816 872T:optclang_-march=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024062620240625
1493653118 0 071980 816 856T:optclang_-march=native_-O_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024062620240625
1510453240 0 072814 808 920T:optclang_-march=native_-Os_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024062620240625
1627250091 0 070748 776 928T:optgcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall2024062620240625
116848435291 0 052780 816 872T:refclang_-march=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024062620240625
135482030933 0 047741 784 928T:refgcc_-march=native_-mtune=native_-O3_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall2024062620240625
147190436135 0 053300 816 872T:refclang_-march=native_-O2_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024062620240625
148172030237 0 046172 816 856T:refclang_-mcpu=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024062620240625
244161225518 0 039646 808 920T:refclang_-march=native_-Os_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024062620240625
247960426456 0 039972 816 856T:refclang_-march=native_-O_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024062620240625
313116427276 0 042045 784 928T:refgcc_-march=native_-mtune=native_-O2_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall2024062620240625
497930026643 0 041068 776 928T:refgcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall2024062620240625
544141225102 0 038272 760 896T:refgcc_-march=native_-mtune=native_-Os_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall2024062620240625

Compiler output


deoxys-256.c: deoxys-256.c:77:45: warning: implicit conversion from 'int' to 'char' changes value from 128 to -128 [-Wconstant-conversion]
deoxys-256.c:   const __m128i MSB_XLS1                = constant8( (0x8<<4),0x00,0x00,0x00, 0x00,0x00,0x00,0x00, 0x00,0x00,0x00,0x00, 0x00,0x00,0x00,0x00 );
deoxys-256.c:                                           ~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
deoxys-256.c: ./tweakable-cipher.macros:12:171: note: expanded from macro 'constant8'
deoxys-256.c: #define constant8(b15,b14,b13,b12,b11,b10,b9,b8,b7,b6,b5,b4,b3,b2,b1,b0)   _mm_set_epi8 ((b0),(b1),(b2),(b3),(b4),(b5),(b6),(b7),(b8),(b9),(b10),(b11),(b12),(b13),(b14),(b15))
deoxys-256.c:                                                                            ~~~~~~~~~~~~                                                                                   ^~~
deoxys-256.c: deoxys-256.c:78:45: warning: implicit conversion from 'int' to 'char' changes value from 144 to -112 [-Wconstant-conversion]
deoxys-256.c:   const __m128i MSB_XLS2                = constant8( (0x9<<4),0x00,0x00,0x00, 0x00,0x00,0x00,0x00, 0x00,0x00,0x00,0x00, 0x00,0x00,0x00,0x00 );
deoxys-256.c:                                           ~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
deoxys-256.c: ./tweakable-cipher.macros:12:171: note: expanded from macro 'constant8'
deoxys-256.c: #define constant8(b15,b14,b13,b12,b11,b10,b9,b8,b7,b6,b5,b4,b3,b2,b1,b0)   _mm_set_epi8 ((b0),(b1),(b2),(b3),(b4),(b5),(b6),(b7),(b8),(b9),(b10),(b11),(b12),(b13),(b14),(b15))
deoxys-256.c:                                                                            ~~~~~~~~~~~~                                                                                   ^~~
deoxys-256.c: 2 warnings generated.
encrypt.c: encrypt.c:48:24: warning: unused variable 'outlen' [-Wunused-variable]
encrypt.c:     unsigned long long outlen = 0;
encrypt.c:                        ^
encrypt.c: encrypt.c:71:25: warning: unused variable 'outlen' [-Wunused-variable]
encrypt.c:     unsigned long long  outlen = 0;
encrypt.c:                         ^
encrypt.c: 2 warnings generated.

Number of similar (implementation,compiler) pairs: 4, namely:
ImplementationCompiler
T:optclang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)
T:optclang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)
T:optclang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)
T:optclang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)

Compiler output


deoxys-256.c: deoxys-256.c:77:45: warning: implicit conversion from 'int' to 'char' changes value from 128 to -128 [-Wconstant-conversion]
deoxys-256.c:   const __m128i MSB_XLS1                = constant8( (0x8<<4),0x00,0x00,0x00, 0x00,0x00,0x00,0x00, 0x00,0x00,0x00,0x00, 0x00,0x00,0x00,0x00 );
deoxys-256.c:                                           ~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
deoxys-256.c: ./tweakable-cipher.macros:12:171: note: expanded from macro 'constant8'
deoxys-256.c: #define constant8(b15,b14,b13,b12,b11,b10,b9,b8,b7,b6,b5,b4,b3,b2,b1,b0)   _mm_set_epi8 ((b0),(b1),(b2),(b3),(b4),(b5),(b6),(b7),(b8),(b9),(b10),(b11),(b12),(b13),(b14),(b15))
deoxys-256.c:                                                                            ~~~~~~~~~~~~                                                                                   ^~~
deoxys-256.c: deoxys-256.c:78:45: warning: implicit conversion from 'int' to 'char' changes value from 144 to -112 [-Wconstant-conversion]
deoxys-256.c:   const __m128i MSB_XLS2                = constant8( (0x9<<4),0x00,0x00,0x00, 0x00,0x00,0x00,0x00, 0x00,0x00,0x00,0x00, 0x00,0x00,0x00,0x00 );
deoxys-256.c:                                           ~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
deoxys-256.c: ./tweakable-cipher.macros:12:171: note: expanded from macro 'constant8'
deoxys-256.c: #define constant8(b15,b14,b13,b12,b11,b10,b9,b8,b7,b6,b5,b4,b3,b2,b1,b0)   _mm_set_epi8 ((b0),(b1),(b2),(b3),(b4),(b5),(b6),(b7),(b8),(b9),(b10),(b11),(b12),(b13),(b14),(b15))
deoxys-256.c:                                                                            ~~~~~~~~~~~~                                                                                   ^~~
deoxys-256.c: deoxys-256.c:92:21: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'XLS' that is compiled without support for 'ssse3'
deoxys-256.c:   if( Direction){   AES( State , subkeys , Tweak , tTweak ); }
deoxys-256.c:                     ^
deoxys-256.c: ./tweakable-cipher.macros:79:41: note: expanded from macro 'AES'
deoxys-256.c: s = xor( s , xor( subkeys[ 0] , t ) );t=permute( t , H_PERMUTATION);\
deoxys-256.c:                                         ^
deoxys-256.c: ./tweakable-cipher.macros:7:22: note: expanded from macro 'permute'
deoxys-256.c: #define permute(a,b) _mm_shuffle_epi8(a,b)
deoxys-256.c:                      ^
deoxys-256.c: deoxys-256.c:92:21: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'XLS' that is compiled without support for 'aes'
deoxys-256.c: ./tweakable-cipher.macros:80:5: note: expanded from macro 'AES'
deoxys-256.c: s = enc( s , xor( subkeys[ 1] , t ) );t=permute( t , H_PERMUTATION);\
deoxys-256.c:     ^
deoxys-256.c: ...

Number of similar (implementation,compiler) pairs: 1, namely:
ImplementationCompiler
T:optclang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)

Compiler output


deoxys-256.c: In file included from deoxys-256.c:29:
deoxys-256.c: deoxys-256.c: In function 'XLS':
deoxys-256.c: tweakable-cipher.macros:2:18: warning: array subscript 11 is outside array bounds of '__m128i[11]' [-Warray-bounds]
deoxys-256.c:     2 | #define dec(a,b) _mm_aesdec_si128(a,b)
deoxys-256.c:       |                  ^~~~~~~~~~~~~~~~~~~~~
deoxys-256.c: tweakable-cipher.macros:113:5: note: in expansion of macro 'dec'
deoxys-256.c:   113 | s = dec( s , xor( subkeys[11] , mc_inv(t) ) );t=permute( t , H_PERMUTATION_INV);\
deoxys-256.c:       |     ^~~
deoxys-256.c: deoxys-256.c:93:10: note: in expansion of macro 'AES_DEC'
deoxys-256.c:    93 |   else { AES_DEC( State , subkeys , Tweak ,dTweak ); }
deoxys-256.c:       |          ^~~~~~~
deoxys-256.c: deoxys-256.c:52:17: note: while referencing 'subkeys'
deoxys-256.c:    52 |         __m128i subkeys[11],
deoxys-256.c:       |         ~~~~~~~~^~~~~~~~~~~
deoxys-256.c: In file included from deoxys-256.c:29:
deoxys-256.c: tweakable-cipher.macros:2:18: warning: array subscript 12 is outside array bounds of '__m128i[11]' [-Warray-bounds]
deoxys-256.c:     2 | #define dec(a,b) _mm_aesdec_si128(a,b)
deoxys-256.c:       |                  ^~~~~~~~~~~~~~~~~~~~~
deoxys-256.c: tweakable-cipher.macros:114:5: note: in expansion of macro 'dec'
deoxys-256.c:   114 | s = dec( s , xor( subkeys[12] , mc_inv(t) ) );t=permute( t , H_PERMUTATION_INV);\
deoxys-256.c:       |     ^~~
deoxys-256.c: deoxys-256.c:93:10: note: in expansion of macro 'AES_DEC'
deoxys-256.c:    93 |   else { AES_DEC( State , subkeys , Tweak ,dTweak ); }
deoxys-256.c:       |          ^~~~~~~
deoxys-256.c: deoxys-256.c:52:17: note: while referencing 'subkeys'
deoxys-256.c: ...

Number of similar (implementation,compiler) pairs: 3, namely:
ImplementationCompiler
T:optgcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)
T:optgcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)
T:optgcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)

Compiler output


encrypt.c: encrypt.c: In function 'crypto_aead_deoxyseq256128v1_opt_timingleaks_encrypt':
encrypt.c: encrypt.c:48:24: warning: unused variable 'outlen' [-Wunused-variable]
encrypt.c:    48 |     unsigned long long outlen = 0;
encrypt.c:       |                        ^~~~~~
encrypt.c: encrypt.c: In function 'crypto_aead_deoxyseq256128v1_opt_timingleaks_decrypt':
encrypt.c: encrypt.c:71:25: warning: unused variable 'outlen' [-Wunused-variable]
encrypt.c:    71 |     unsigned long long  outlen = 0;
encrypt.c:       |                         ^~~~~~

Number of similar (implementation,compiler) pairs: 1, namely:
ImplementationCompiler
T:optgcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)

Compiler output


tweakableBC.c: tweakableBC.c:886:9: warning: variable 'Nr' set but not used [-Wunused-but-set-variable]
tweakableBC.c:     int Nr;
tweakableBC.c:         ^
tweakableBC.c: tweakableBC.c:1005:9: warning: variable 'Nr' set but not used [-Wunused-but-set-variable]
tweakableBC.c:     int Nr;
tweakableBC.c:         ^
tweakableBC.c: 2 warnings generated.

Number of similar (implementation,compiler) pairs: 5, namely:
ImplementationCompiler
T:refclang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)
T:refclang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)
T:refclang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)
T:refclang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)
T:refclang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)

Compiler output


tweakableBC.c: tweakableBC.c: In function 'aesTweakEncrypt':
tweakableBC.c: tweakableBC.c:886:9: warning: variable 'Nr' set but not used [-Wunused-but-set-variable]
tweakableBC.c:   886 |     int Nr;
tweakableBC.c:       |         ^~
tweakableBC.c: tweakableBC.c: In function 'aesTweakDecrypt':
tweakableBC.c: tweakableBC.c:1005:9: warning: variable 'Nr' set but not used [-Wunused-but-set-variable]
tweakableBC.c:  1005 |     int Nr;
tweakableBC.c:       |         ^~

Number of similar (implementation,compiler) pairs: 4, namely:
ImplementationCompiler
T:refgcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)
T:refgcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)
T:refgcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)
T:refgcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)