Implementation notes: amd64, bolero, crypto_aead/norx6461v1

Computer: bolero
Microarchitecture: amd64; BW+AES (406f1)
Architecture: amd64
CPU ID: GenuineIntel-000406f1-1fc9cbf5
SUPERCOP version: 20230530
Operation: crypto_aead
Primitive: norx6461v1

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
26744	6919 0 0	28038 776 928	`T:ymm`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230530	20230530
26780	6919 0 0	30054 776 928	`T:ymm`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230530	20230530
26956	6085 0 0	25065 752 896	`T:ymm`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230530	20230530
29304	7102 0 0	29716 816 872	`T:ymm`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
29328	7102 0 0	29404 816 872	`T:ymm`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
29328	7147 0 0	26244 816 856	`T:ymm`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
29356	6414 0 0	26302 808 920	`T:ymm`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
29972	7772 0 0	28349 768 928	`T:ymm`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230530	20230530
37104	10049 0 0	33190 776 928	`T:xmm`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230530	20230530
37152	10049 0 0	31158 776 928	`T:xmm`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230530	20230530
37312	9820 0 0	28777 752 896	`T:xmm`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230530	20230530
40220	5455 8 0	27972 824 872	`T:ref`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
40264	12432 0 0	33005 768 928	`T:xmm`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230530	20230530
40272	5375 8 0	28204 824 872	`T:ref`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
40460	3371 8 0	23446 816 920	`T:ref`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
43344	11446 0 0	34116 816 872	`T:xmm`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
43372	11459 0 0	30596 816 856	`T:xmm`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
43972	4032 8 0	23098 760 896	`T:ref`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230530	20230530
44276	5241 8 0	24604 824 856	`T:ref`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
45308	5808 8 0	27276 824 856	`T:ref`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
45700	15019 0 0	36388 816 856	`T:xmm`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
47344	10366 8 0	33645 792 928	`T:ref`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230530	20230530
49060	10534 0 0	30478 808 920	`T:xmm`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
52696	11430 0 0	33788 816 872	`T:xmm`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230530	20230530
56076	4365 8 0	25093 784 928	`T:ref`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230530	20230530
67184	5218 8 0	26485 792 928	`T:ref`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230530	20230530

Compiler output

Implementation: T:ref
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE

norx.c: In function 'norx_decrypt_lastblock',
norx.c: inlined from 'norx_decrypt_msg' at norx.c:502:9,
norx.c: inlined from 'norx_decrypt_msg' at norx.c:490:6:
norx.c: norx.c:313:16: warning: writing 1 byte into a region of size 0 [-Wstringop-overflow=]
norx.c: 313 | b[j] = c;
norx.c: | ~~~~~~~^~~
norx.c: norx.c: In function 'norx_decrypt_msg':
norx.c: norx.c:287:13: note: at offset 8 into destination object 'b' of size 8
norx.c: 287 | uint8_t b[BYTES(NORX_W)];
norx.c: | ^
norx.c: In function 'norx_decrypt_lastblock',
norx.c: inlined from 'norx_decrypt_msg' at norx.c:502:9,
norx.c: inlined from 'norx_decrypt_msg' at norx.c:490:6,
norx.c: inlined from 'norx_aead_decrypt' at norx.c:688:5:
norx.c: norx.c:313:16: warning: writing 1 byte into a region of size 0 [-Wstringop-overflow=]
norx.c: 313 | b[j] = c;
norx.c: | ~~~~~~~^~~
norx.c: norx.c: In function 'norx_aead_decrypt':
norx.c: norx.c:287:13: note: at offset 8 into destination object 'b' of size 8
norx.c: 287 | uint8_t b[BYTES(NORX_W)];
norx.c: | ^

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref

Compiler output

Implementation: T:ymm
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

norx.c: norx.c:350:24: error: always_inline function '_mm256_loadu_si256' requires target feature 'avx', but would be inlined into function 'crypto_aead_norx6461v1_ymm_timingleaks_encrypt' that is compiled without support for 'avx'
norx.c: const __m256i K = LOADU(k + 0);
norx.c: ^
norx.c: norx.c:47:19: note: expanded from macro 'LOADU'
norx.c: #define LOADU(in) _mm256_loadu_si256((__m256i*)(in))
norx.c: ^
norx.c: norx.c:350:24: error: AVX vector return of type '__m256i' (vector of 4 'long long' values) without 'avx' enabled changes the ABI
norx.c: norx.c:47:19: note: expanded from macro 'LOADU'
norx.c: #define LOADU(in) _mm256_loadu_si256((__m256i*)(in))
norx.c: ^
norx.c: norx.c:355:5: error: always_inline function '_mm256_castsi128_si256' requires target feature 'avx', but would be inlined into function 'crypto_aead_norx6461v1_ymm_timingleaks_encrypt' that is compiled without support for 'avx'
norx.c: INITIALIZE(A, B, C, D, N, K);
norx.c: ^
norx.c: norx.c:270:9: note: expanded from macro 'INITIALIZE'
norx.c: A = _mm256_castsi128_si256(N); \
norx.c: ^
norx.c: norx.c:355:5: error: AVX vector return of type '__m256i' (vector of 4 'long long' values) without 'avx' enabled changes the ABI
norx.c: norx.c:270:9: note: expanded from macro 'INITIALIZE'
norx.c: A = _mm256_castsi128_si256(N); \
norx.c: ^
norx.c: norx.c:355:5: error: '__builtin_ia32_insert128i256' needs target feature avx2
norx.c: norx.c:271:9: note: expanded from macro 'INITIALIZE'
norx.c: A = _mm256_inserti128_si256(A, _mm_set_epi64x(U1, U0), 1); \
norx.c: ^
norx.c: /usr/lib/llvm-14/lib/clang/14.0.0/include/avx2intrin.h:827:13: note: expanded from macro '_mm256_inserti128_si256'
norx.c: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ymm