Implementation notes: amd64, bolero, crypto_aead/hs1sivlov1

Computer: bolero
Microarchitecture: amd64; Broadwell+AES (406f1)
Architecture: amd64
CPU ID: GenuineIntel-000406f1-1fc9cbf5
SUPERCOP version: 20240716
Operation: crypto_aead
Primitive: hs1sivlov1

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
20804	8191 0 0	30188 832 856	`T:ref`	`clang_-mcpu=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240717	20240716
20848	9336 0 0	32980 832 872	`T:ref`	`clang_-march=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240717	20240716
21720	9336 0 0	32668 832 872	`T:ref`	`clang_-march=native_-O2_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240717	20240716
22176	6860 0 0	30246 792 928	`T:ref`	`gcc_-march=native_-mtune=native_-O3_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240717	20240716
28512	5844 0 0	27174 792 928	`T:ref`	`gcc_-march=native_-mtune=native_-O2_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240717	20240716
30232	4707 0 0	24188 832 856	`T:ref`	`clang_-march=native_-O_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240717	20240716
32444	3975 0 0	24302 824 920	`T:ref`	`clang_-march=native_-Os_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240717	20240716
38448	6288 0 0	27182 792 928	`T:ref`	`gcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall`	20240717	20240716

Test failure

error 111
crypto_aead_decrypt allows trivial forgeries

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`T:ref`	`gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)`

Compiler output

encrypt.c: encrypt.c:333:14: warning: unused variable 'k' [-Wunused-variable]
encrypt.c:     unsigned k = (HS1_SIV_HASH_RNDS > 4 ? 1 : 2);
encrypt.c:              ^
encrypt.c: encrypt.c:242:13: warning: unused function 'pmul64' [-Wunused-function]
encrypt.c: static void pmul64(uint64_t *dh, uint64_t *dl, uint64_t a, uint64_t b) {
encrypt.c:             ^
encrypt.c: encrypt.c:270:17: warning: unused function 'asu_hash' [-Wunused-function]
encrypt.c: static uint32_t asu_hash(uint64_t x, uint64_t *k) {
encrypt.c:                 ^
encrypt.c: 3 warnings generated.

Number of similar (implementation,compiler) pairs: 5, namely:

Implementation	Compiler
`T:ref`	`clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)`
`T:ref`	`clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)`
`T:ref`	`clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)`
`T:ref`	`clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)`
`T:ref`	`clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)`

Compiler output

encrypt.c: encrypt.c: In function 'hs1_hash':
encrypt.c: encrypt.c:333:14: warning: unused variable 'k' [-Wunused-variable]
encrypt.c:   333 |     unsigned k = (HS1_SIV_HASH_RNDS > 4 ? 1 : 2);
encrypt.c:       |              ^
encrypt.c: At top level:
encrypt.c: encrypt.c:270:17: warning: 'asu_hash' defined but not used [-Wunused-function]
encrypt.c:   270 | static uint32_t asu_hash(uint64_t x, uint64_t *k) {
encrypt.c:       |                 ^~~~~~~~
encrypt.c: encrypt.c:242:13: warning: 'pmul64' defined but not used [-Wunused-function]
encrypt.c:   242 | static void pmul64(uint64_t *dh, uint64_t *dl, uint64_t a, uint64_t b) {
encrypt.c:       |             ^~~~~~

Number of similar (implementation,compiler) pairs: 4, namely:

Implementation	Compiler
`T:ref`	`gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)`
`T:ref`	`gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)`
`T:ref`	`gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)`
`T:ref`	`gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)`

Namespace violations

encrypt.o chacha_ivsetup T
encrypt.o chacha_keysetup T
encrypt.o chacha_xor T
encrypt.o hs1 T
encrypt.o hs1_hash T
encrypt.o hs1siv_chacha256 T
encrypt.o hs1siv_decrypt T
encrypt.o hs1siv_encrypt T
encrypt.o hs1siv_subkeygen T
encrypt.o prf_hash2 T

Number of similar (implementation,compiler) pairs: 8, namely:

Implementation	Compiler
`T:ref`	`clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)`
`T:ref`	`clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)`
`T:ref`	`clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)`
`T:ref`	`clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)`
`T:ref`	`clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)`
`T:ref`	`gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)`
`T:ref`	`gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)`
`T:ref`	`gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)`