Implementation notes: amd64, cezanne, crypto_aead/xoodyakv1

Computer: cezanne
Microarchitecture: amd64; Zen 3 (a50f00)
Architecture: amd64
CPU ID: AuthenticAMD-00a50f00-178bfbff
SUPERCOP version: 20231107
Operation: crypto_aead
Primitive: xoodyakv1

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
47900	18559 0 0	33848 812 1048	`T:xkcp/SSE2`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230524	20221122
47947	19156 0 0	34576 812 1048	`T:xkcp/SSE2`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230524	20221122
47981	17024 0 0	29334 804 1016	`T:xkcp/SSE2`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230524	20221122
48003	17468 0 0	30142 804 1016	`T:xkcp/SSE2`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230524	20221122
55456	17863 0 0	32312 780 1080	`T:xkcp/SSE2`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230524	20221122
55566	18703 0 0	34824 780 1080	`T:xkcp/SSE2`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230524	20221122
55667	16635 0 0	30752 780 1080	`T:xkcp/SSE2`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230524	20221122
55779	16341 0 0	29219 756 1048	`T:xkcp/SSE2`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230524	20221122
57656	11886 0 0	26074 812 1016	`T:xkcp/plain-ua`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230524	20221122
61689	11994 0 0	26440 788 1080	`T:xkcp/plain-ua`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230524	20221122
62377	12423 0 0	27224 788 1080	`T:xkcp/plain-ua`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230524	20221122
63778	13303 0 0	29808 788 1080	`T:xkcp/plain-ua`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230524	20221122
64174	11354 0 0	24531 764 1048	`T:xkcp/plain-ua`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230524	20221122
64495	13304 0 0	29868 820 1016	`T:xkcp/plain-ua`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230524	20221122
69645	10907 0 0	24562 812 1016	`T:xkcp/plain-ua`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230524	20221122
70011	13103 0 0	29892 820 1048	`T:xkcp/plain-ua`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230524	20221122
70285	12495 0 0	29148 820 1048	`T:xkcp/plain-ua`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230524	20221122
78611	6667 0 0	23428 820 1048	`T:ref`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230524	20221122
80545	7390 0 0	23908 820 1016	`T:ref`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230524	20221122
86749	6947 0 0	23820 820 1048	`T:ref`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230524	20221122
320114	5224 0 0	21664 788 1080	`T:ref`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230524	20221122
418362	4811 0 0	18626 812 1016	`T:ref`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230524	20221122
479443	5103 0 0	19832 788 1080	`T:ref`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230524	20221122
530510	5535 0 0	19706 812 1016	`T:ref`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230524	20221122
564988	4928 0 0	19320 788 1080	`T:ref`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230524	20221122
691157	4174 0 0	17323 764 1048	`T:ref`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230524	20221122
3371366	44518 176 140	65598 1260 1176	`T:refcpp`	`clang++_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230524	20221122
3573950	54207 176 126	75275 1748 1272	`T:refcpp`	`g++_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230524	20221122
3586392	42256 176 140	63093 1252 1176	`T:refcpp`	`clang++_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230524	20221122
3634373	32507 176 140	50431 1236 1176	`T:refcpp`	`clang++_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230524	20221122
4002519	43107 176 126	62676 1756 1272	`T:refcpp`	`g++_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230524	20221122
4925324	32952 176 126	52078 1764 1272	`T:refcpp`	`g++_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230524	20221122
5210881	27542 176 126	45569 1244 1240	`T:refcpp`	`g++_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20230524	20221122
31377600	63096 200 140	90968 1468 1176	`T:refcpp`	`clang++_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20230524	20221122

Compiler output

Implementation: T:xkcp/AVR8
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:2:16: error: unexpected token in argument list
Xoodoo-avr8-u1.s: ; The eXtended Keccak Code Package (XKCP)
Xoodoo-avr8-u1.s: ^
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:5:14: error: unexpected token in argument list
Xoodoo-avr8-u1.s: ; The Xoodoo permutation, designed by Joan Daemen, Seth Hoffert, Gilles Van Assche and Ronny Van Keer.
Xoodoo-avr8-u1.s: ^
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:7:21: error: unexpected token in argument list
Xoodoo-avr8-u1.s: ; Implementation by Ronny Van Keer, hereby denoted as "the implementer".
Xoodoo-avr8-u1.s: ^
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:9:12: error: unexpected token in argument list
Xoodoo-avr8-u1.s: ; For more information, feedback or questions, please refer to the Keccak Team website:
Xoodoo-avr8-u1.s: ^
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:10:3: error: invalid symbol redefinition
Xoodoo-avr8-u1.s: ; https://keccak.team/
Xoodoo-avr8-u1.s: ^
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:12:10: error: unexpected token in argument list
Xoodoo-avr8-u1.s: ; To the extent possible under law, the implementer has waived all copyright
Xoodoo-avr8-u1.s: ^
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:13:15: error: unexpected token in argument list
Xoodoo-avr8-u1.s: ; and related or neighboring rights to the source code in this file.
Xoodoo-avr8-u1.s: ^
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:16:3: error: unexpected token at start of statement
Xoodoo-avr8-u1.s: ; ---
Xoodoo-avr8-u1.s: ^
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:18:13: error: unexpected token in argument list
Xoodoo-avr8-u1.s: ...

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:xkcp/AVR8
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:xkcp/AVR8
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:xkcp/AVR8
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:xkcp/AVR8
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:xkcp/AVR8

Compiler output

Implementation: T:xkcp/AVR8
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s: Assembler messages:
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:2: Error: no such instruction: `the eXtended Keccak Code Package (XKCP)'
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:5: Error: no such instruction: `the Xoodoo permutation,designed by Joan Daemen,Seth Hoffert,Gilles Van Assche and Ronny Van Keer.'
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:7: Error: no such instruction: `implementation by Ronny Van Keer,hereby denoted as "the implementer".'
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:9: Error: no such instruction: `for more information,feedback or questions,please refer to the Keccak Team website:'
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:12: Error: no such instruction: `to the extent possible under law,the implementer has waived all copyright'
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:13: Error: junk `or neighboring rights to the source code in this file.' after expression
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:13: Error: number of operands mismatch for `and'
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:16: Error: junk at end of line, first unrecognized character is `-'
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:18: Error: no such instruction: `this file implements Xoodoo in a SnP-compatible way.'
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:19: Error: no such instruction: `please refer to SnP-documentation.h for more details.'
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:21: Error: no such instruction: `this implementation comes with Xoodoo-SnP.h in the same folder.'
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:22: Error: no such instruction: `please refer to LowLevel.build for the exact list of other files it must be combined with.'
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:25: Error: no such instruction: `tested on ATmega1280 simulator'
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:27: Error: no such instruction: `registers used in all routines'
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:35: Error: junk at end of line, first unrecognized character is `-'
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:37: Error: no such instruction: `void Xoodoo_StaticInitialize( void)'
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:41: Error: junk at end of line, first unrecognized character is `-'
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:43: Error: no such instruction: `void Xoodoo_Initialize(void *state)'
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:45: Error: no such instruction: `argument state is passed in r24:r25'
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:49: Error: too many memory references for `mov'
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:50: Error: no such instruction: `ldi r23,3*4/2'
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:50: Error: no such instruction: `clear state (8 bytes/2 lanes)per iteration'
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:52: Error: no such instruction: `st z+,zero'
Xoodoo-avr8-u1.s: Xoodoo-avr8-u1.s:53: Error: no such instruction: `st z+,zero'
Xoodoo-avr8-u1.s: ...

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:xkcp/AVR8
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:xkcp/AVR8
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:xkcp/AVR8
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:xkcp/AVR8

Compiler output

Implementation: T:xkcp/AVX512
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

Xoodoo-SIMD512.c: Xoodoo-SIMD512.c:379:9: error: '__builtin_ia32_pternlogd128_mask' needs target feature avx512vl
Xoodoo-SIMD512.c: Round(RC[i]);
Xoodoo-SIMD512.c: ^
Xoodoo-SIMD512.c: Xoodoo-SIMD512.c:328:29: note: expanded from macro 'Round'
Xoodoo-SIMD512.c: p = XOR3( a0, a1, a2 ); \
Xoodoo-SIMD512.c: ^
Xoodoo-SIMD512.c: Xoodoo-SIMD512.c:311:33: note: expanded from macro 'XOR3'
Xoodoo-SIMD512.c: #define XOR3(a,b,c) _mm_ternarylogic_epi32(a,b,c,0x96)
Xoodoo-SIMD512.c: ^
Xoodoo-SIMD512.c: /usr/lib/llvm-11/lib/clang/11.0.1/include/avx512vlintrin.h:6529:12: note: expanded from macro '_mm_ternarylogic_epi32'
Xoodoo-SIMD512.c: (__m128i)__builtin_ia32_pternlogd128_mask((__v4si)(__m128i)(A), \
Xoodoo-SIMD512.c: ^
Xoodoo-SIMD512.c: Xoodoo-SIMD512.c:379:9: error: '__builtin_ia32_prold128' needs target feature avx512vl
Xoodoo-SIMD512.c: Xoodoo-SIMD512.c:330:29: note: expanded from macro 'Round'
Xoodoo-SIMD512.c: e = ROL32( p, 5 ); \
Xoodoo-SIMD512.c: ^
Xoodoo-SIMD512.c: Xoodoo-SIMD512.c:305:33: note: expanded from macro 'ROL32'
Xoodoo-SIMD512.c: #define ROL32(a, o) _mm_rol_epi32(a, o)
Xoodoo-SIMD512.c: ^
Xoodoo-SIMD512.c: /usr/lib/llvm-11/lib/clang/11.0.1/include/avx512vlintrin.h:4301:12: note: expanded from macro '_mm_rol_epi32'
Xoodoo-SIMD512.c: (__m128i)__builtin_ia32_prold128((__v4si)(__m128i)(a), (int)(b))
Xoodoo-SIMD512.c: ^
Xoodoo-SIMD512.c: Xoodoo-SIMD512.c:379:9: error: '__builtin_ia32_prold128' needs target feature avx512vl
Xoodoo-SIMD512.c: Xoodoo-SIMD512.c:331:29: note: expanded from macro 'Round'
Xoodoo-SIMD512.c: p = ROL32( p, 14 ); \
Xoodoo-SIMD512.c: ...

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:xkcp/AVX512
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:xkcp/AVX512
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:xkcp/AVX512
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:xkcp/AVX512
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:xkcp/AVX512

Compiler output

Implementation: T:xkcp/AVX512
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

Xoodoo-SIMD512.c: Xoodoo-SIMD512.c: In function 'Xoofff_AddIs':
Xoodoo-SIMD512.c: Xoodoo-SIMD512.c:429:16: warning: AVX512F vector return without AVX512F enabled changes the ABI [-Wpsabi]
Xoodoo-SIMD512.c: 429 | lanes1 = LOAD512u(input[ 0]);
Xoodoo-SIMD512.c: | ^
Xoodoo-SIMD512.c: In file included from /usr/lib/gcc/x86_64-linux-gnu/10/include/immintrin.h:63,
Xoodoo-SIMD512.c: from Xoodoo-SIMD512.c:24:
Xoodoo-SIMD512.c: Xoodoo-SIMD512.c: In function 'Xoodoo_Permute_Nrounds':
Xoodoo-SIMD512.c: /usr/lib/gcc/x86_64-linux-gnu/10/include/avx512vlintrin.h:11500:1: error: inlining failed in call to 'always_inline' '_mm_rol_epi32': target specific option mismatch
Xoodoo-SIMD512.c: 11500 | _mm_rol_epi32 (__m128i __A, const int __B)
Xoodoo-SIMD512.c: | ^~~~~~~~~~~~~
Xoodoo-SIMD512.c: Xoodoo-SIMD512.c:305:33: note: called from here
Xoodoo-SIMD512.c: 305 | #define ROL32(a, o) _mm_rol_epi32(a, o)
Xoodoo-SIMD512.c: | ^~~~~~~~~~~~~~~~~~~
Xoodoo-SIMD512.c: Xoodoo-SIMD512.c:353:30: note: in expansion of macro 'ROL32'
Xoodoo-SIMD512.c: 353 | a1 = ROL32(a1, 1); \
Xoodoo-SIMD512.c: | ^~~~~
Xoodoo-SIMD512.c: Xoodoo-SIMD512.c:379:9: note: in expansion of macro 'Round'
Xoodoo-SIMD512.c: 379 | Round(RC[i]);
Xoodoo-SIMD512.c: | ^~~~~
Xoodoo-SIMD512.c: In file included from /usr/lib/gcc/x86_64-linux-gnu/10/include/immintrin.h:63,
Xoodoo-SIMD512.c: from Xoodoo-SIMD512.c:24:
Xoodoo-SIMD512.c: /usr/lib/gcc/x86_64-linux-gnu/10/include/avx512vlintrin.h:10602:1: error: inlining failed in call to 'always_inline' '_mm_ternarylogic_epi32': target specific option mismatch
Xoodoo-SIMD512.c: 10602 | _mm_ternarylogic_epi32 (__m128i __A, __m128i __B, __m128i __C,
Xoodoo-SIMD512.c: | ^~~~~~~~~~~~~~~~~~~~~~
Xoodoo-SIMD512.c: Xoodoo-SIMD512.c:312:33: note: called from here
Xoodoo-SIMD512.c: ...

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:xkcp/AVX512
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:xkcp/AVX512
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:xkcp/AVX512
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:xkcp/AVX512

Compiler output

Implementation: T:xkcp/SSE2
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

Xoodoo-SIMD128.c: Xoodoo-SIMD128.c:288:9: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'Xoodoo_Permute_Nrounds' that is compiled without support for 'ssse3'
Xoodoo-SIMD128.c: Round(RC[i]);
Xoodoo-SIMD128.c: ^
Xoodoo-SIMD128.c: Xoodoo-SIMD128.c:263:25: note: expanded from macro 'Round'
Xoodoo-SIMD128.c: Rho_east(); \
Xoodoo-SIMD128.c: ^
Xoodoo-SIMD128.c: Xoodoo-SIMD128.c:251:30: note: expanded from macro 'Rho_east'
Xoodoo-SIMD128.c: a2 = _mm_shuffle_epi8( a2, rhoEast2);
Xoodoo-SIMD128.c: ^
Xoodoo-SIMD128.c: 1 error generated.

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:xkcp/SSE2