Implementation notes: amd64, comet, crypto_kem/r5nd1kem5d

Computer: comet
Architecture: amd64
CPU ID: GenuineIntel-000806ec-bfebfbff
SUPERCOP version: 20220213
Operation: crypto_kem
Primitive: r5nd1kem5d

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
164422	33891 0 0	184632 900 1776	`T:avx2`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210124	20210114
172728	33891 0 0	184632 900 1776	`T:opt`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210124	20210114
227914	33874 0 0	184939 884 1744	`T:avx2`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210124	20210114
230665	33874 0 0	184939 884 1744	`T:opt`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210124	20210114
230833	33874 0 0	184939 884 1744	`T:opt`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210124	20210114
230877	33874 0 0	184939 884 1744	`T:avx2`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210124	20210114
234263	32961 0 0	182499 884 1744	`T:opt`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210124	20210114
234347	32961 0 0	182499 884 1744	`T:avx2`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210124	20210114
236188	38779 0 0	188339 884 1744	`T:opt`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210124	20210114
237380	38779 0 0	188339 884 1744	`T:avx2`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210124	20210114
537648	21361 0 0	172905 876 1744	`T:avx2`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210124	20210114
539004	21361 0 0	172905 876 1744	`T:opt`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210124	20210114
539182	22915 0 0	174616 900 1776	`T:avx2`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210124	20210114
542196	22915 0 0	174616 900 1776	`T:opt`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210124	20210114
581167	21683 0 0	173864 900 1776	`T:opt`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210124	20210114
582943	21683 0 0	173864 900 1776	`T:avx2`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210124	20210114
678305	19058 0 0	171728 892 1744	`T:avx2`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210124	20210114
680582	19058 0 0	171728 892 1744	`T:opt`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210124	20210114
7032284	45702 648 524	199024 1516 2256	`T:ref`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210124	20210114
7039521	47219 648 524	199472 1516 2256	`T:ref`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210124	20210114
7065307	45702 648 524	199024 1516 2256	`T:ref`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210124	20210114
16832119	44183 652 520	197225 1532 2320	`T:ref`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210124	20210114
16840249	34442 652 520	186169 1532 2320	`T:ref`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210124	20210114
19081437	42311 648 524	194048 1516 2256	`T:ref`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210124	20210114
19243562	25686 652 520	183229 1580 2288	`T:ref`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210124	20210114
19318714	31934 652 520	184849 1532 2320	`T:ref`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210124	20210114
19752527	29841 648 524	181430 1508 2256	`T:ref`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210124	20210114

Compiler output

Implementation: T:avx2
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

a_fixed.c: In file included from a_fixed.c:10:
a_fixed.c: In file included from ./a_fixed.h:13:
a_fixed.c: ./r5_parameter_sets.h:139:2: warning: AVX2 not supported by platform [-W#warnings]
a_fixed.c: #warning AVX2 not supported by platform
a_fixed.c: ^
a_fixed.c: 1 warning generated.
a_random.c: In file included from a_random.c:10:
a_random.c: In file included from ./a_random.h:13:
a_random.c: ./r5_parameter_sets.h:139:2: warning: AVX2 not supported by platform [-W#warnings]
a_random.c: #warning AVX2 not supported by platform
a_random.c: ^
a_random.c: 1 warning generated.
cca_encrypt.c: In file included from cca_encrypt.c:11:
cca_encrypt.c: In file included from ./cca_encrypt.h:14:
cca_encrypt.c: ./r5_parameter_sets.h:139:2: warning: AVX2 not supported by platform [-W#warnings]
cca_encrypt.c: #warning AVX2 not supported by platform
cca_encrypt.c: ^
cca_encrypt.c: 1 warning generated.
cpa_kem.c: In file included from cpa_kem.c:12:
cpa_kem.c: In file included from ./cpa_kem.h:13:
cpa_kem.c: ./r5_parameter_sets.h:139:2: warning: AVX2 not supported by platform [-W#warnings]
cpa_kem.c: #warning AVX2 not supported by platform
cpa_kem.c: ^
cpa_kem.c: 1 warning generated.
drbg.c: In file included from drbg.c:18:
drbg.c: In file included from ./drbg.h:13:
drbg.c: ./r5_parameter_sets.h:139:2: warning: AVX2 not supported by platform [-W#warnings]
drbg.c: #warning AVX2 not supported by platform
drbg.c: ^
drbg.c: 1 warning generated.
matmul.c: In file included from matmul.c:8:
matmul.c: In file included from ./matmul.h:8:
matmul.c: ./r5_parameter_sets.h:139:2: warning: AVX2 not supported by platform [-W#warnings]
matmul.c: #warning AVX2 not supported by platform
matmul.c: ^
matmul.c: 1 warning generated.
matmul_avx2.c: In file included from matmul_avx2.c:8:
matmul_avx2.c: In file included from ./matmul.h:8:
matmul_avx2.c: ./r5_parameter_sets.h:139:2: warning: AVX2 not supported by platform [-W#warnings]
matmul_avx2.c: #warning AVX2 not supported by platform
matmul_avx2.c: ^
matmul_avx2.c: 1 warning generated.
matmul_cm.c: In file included from matmul_cm.c:7:
matmul_cm.c: In file included from ./matmul.h:8:
matmul_cm.c: ./r5_parameter_sets.h:139:2: warning: AVX2 not supported by platform [-W#warnings]
matmul_cm.c: #warning AVX2 not supported by platform
matmul_cm.c: ^
matmul_cm.c: 1 warning generated.
probe_cm.c: In file included from probe_cm.c:6:
probe_cm.c: ./r5_parameter_sets.h:139:2: warning: AVX2 not supported by platform [-W#warnings]
probe_cm.c: #warning AVX2 not supported by platform
probe_cm.c: ^
probe_cm.c: 1 warning generated.
r5_cca_kem.c: In file included from r5_cca_kem.c:7:
r5_cca_kem.c: ./r5_parameter_sets.h:139:2: warning: AVX2 not supported by platform [-W#warnings]
r5_cca_kem.c: #warning AVX2 not supported by platform
r5_cca_kem.c: ^
r5_cca_kem.c: 1 warning generated.
r5_cca_pke.c: In file included from r5_cca_pke.c:12:
r5_cca_pke.c: ./r5_parameter_sets.h:139:2: warning: AVX2 not supported by platform [-W#warnings]
r5_cca_pke.c: #warning AVX2 not supported by platform
r5_cca_pke.c: ^
r5_cca_pke.c: 1 warning generated.
r5_cpa_kem.c: In file included from r5_cpa_kem.c:9:
r5_cpa_kem.c: ./r5_parameter_sets.h:139:2: warning: AVX2 not supported by platform [-W#warnings]
r5_cpa_kem.c: #warning AVX2 not supported by platform
r5_cpa_kem.c: ^
r5_cpa_kem.c: 1 warning generated.
r5_cpa_pke_n1.c: In file included from r5_cpa_pke_n1.c:6:
r5_cpa_pke_n1.c: ./r5_parameter_sets.h:139:2: warning: AVX2 not supported by platform [-W#warnings]
r5_cpa_pke_n1.c: #warning AVX2 not supported by platform
r5_cpa_pke_n1.c: ^
r5_cpa_pke_n1.c: 1 warning generated.
r5_cpa_pke_nd.c: In file included from r5_cpa_pke_nd.c:7:
r5_cpa_pke_nd.c: ./r5_parameter_sets.h:139:2: warning: AVX2 not supported by platform [-W#warnings]
r5_cpa_pke_nd.c: #warning AVX2 not supported by platform
r5_cpa_pke_nd.c: ^
r5_cpa_pke_nd.c: 1 warning generated.
r5_dem.c: In file included from r5_dem.c:11:
r5_dem.c: ./r5_parameter_sets.h:139:2: warning: AVX2 not supported by platform [-W#warnings]
r5_dem.c: #warning AVX2 not supported by platform
r5_dem.c: ^
r5_dem.c: 1 warning generated.
ringmul.c: In file included from ringmul.c:8:
ringmul.c: In file included from ./ringmul.h:9:
ringmul.c: ./r5_parameter_sets.h:139:2: warning: AVX2 not supported by platform [-W#warnings]
ringmul.c: #warning AVX2 not supported by platform
ringmul.c: ^
ringmul.c: 1 warning generated.
ringmul_cm.c: In file included from ringmul_cm.c:8:
ringmul_cm.c: In file included from ./ringmul.h:9:
ringmul_cm.c: ./r5_parameter_sets.h:139:2: warning: AVX2 not supported by platform [-W#warnings]
ringmul_cm.c: #warning AVX2 not supported by platform
ringmul_cm.c: ^
ringmul_cm.c: 1 warning generated.

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2

Namespace violations

Implementation: T:avx2
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

a_fixed.o create_A_fixed T
a_random.o create_A_random T
drbg.o drbg_sampler16_2_once T
drbg.o drbg_sampler16_2_once_customization T
little_endian.o u16_from_le T
little_endian.o u16_to_le T
little_endian.o u32_from_le T
little_endian.o u32_to_le T
little_endian.o u64_from_le T
little_endian.o u64_to_le T
little_endian.o u8_from_le T
little_endian.o u8_to_le T
misc.o ceil_log2 T
misc.o print_hex T
misc.o print_sage_s_matrix T
misc.o print_sage_s_vector T
misc.o print_sage_s_vector_matrix T
misc.o print_sage_u_matrix T
misc.o print_sage_u_vector T
misc.o print_sage_u_vector_matrix T
probe_cm.o probe_cm T
r5_cca_kem.o r5_cca_kem_decapsulate T
r5_cca_kem.o r5_cca_kem_encapsulate T
r5_cca_kem.o r5_cca_kem_keygen T
r5_cca_pke.o r5_cca_pke_decrypt T
r5_cca_pke.o r5_cca_pke_encrypt T
r5_cca_pke.o r5_cca_pke_keygen T
r5_cpa_kem.o r5_cpa_kem_decapsulate T
r5_cpa_kem.o r5_cpa_kem_encapsulate T
r5_cpa_kem.o r5_cpa_kem_keygen T
r5_cpa_pke_nd.o r5_cpa_pke_decrypt T
r5_cpa_pke_nd.o r5_cpa_pke_encrypt T
r5_cpa_pke_nd.o r5_cpa_pke_keygen T
r5_dem.o round5_dem T
r5_dem.o round5_dem_inverse T
r5_hash.o hash T
r5_hash.o hash_customization T
r5_memory.o checked_calloc T
r5_memory.o checked_malloc T
r5_memory.o checked_realloc T
r5_memory.o conditional_constant_time_memcpy T
r5_memory.o constant_time_memcmp T
ringmul_cm.o create_secret_vector T
ringmul_cm.o ringmul_p T
ringmul_cm.o ringmul_q T
shake.o cshake128 T
shake.o cshake128_absorb T
shake.o cshake128_init T
shake.o cshake128_squeezeblocks T
shake.o cshake256 T
shake.o cshake256_absorb T
shake.o cshake256_init T
shake.o cshake256_squeezeblocks T
shake.o shake128 T
shake.o shake128_absorb T
shake.o shake128_init T
shake.o shake128_squeezeblocks T
shake.o shake256 T
shake.o shake256_absorb T
shake.o shake256_init T
shake.o shake256_squeezeblocks T
xe2_c16.o xe2_53_compute T
xe2_c16.o xe2_53_fixerr T
xe4_c64.o xe4_163_compute T
xe4_c64.o xe4_163_fixerr T
xe5_c64.o xe5_190_compute T
xe5_c64.o xe5_190_fixerr T
xe5_c64.o xe5_218_compute T
xe5_c64.o xe5_218_fixerr T
xe5_c64.o xe5_234_compute T
xe5_c64.o xe5_234_fixerr T
xef_ref.o xef_compute T
xef_ref.o xef_fixerr T
xef_ref.o xef_reg R

Number of similar (compiler,implementation) pairs: 18, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt

Namespace violations

Implementation: T:ref
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

a_fixed.o A_fixed B
a_fixed.o A_fixed_len B
a_fixed.o create_A_fixed T
a_fixed.o r5_parameter_set_names C
a_fixed.o r5_parameter_sets C
a_random.o create_A_random T
a_random.o r5_parameter_set_names C
a_random.o r5_parameter_sets C
cca_encrypt.o r5_parameter_set_names C
cca_encrypt.o r5_parameter_sets C
cpa_kem.o r5_parameter_set_names C
cpa_kem.o r5_parameter_sets C
drbg.o drbg T
drbg.o drbg_init T
drbg.o drbg_init_customization T
drbg.o drbg_sampler16 T
drbg.o drbg_sampler16_2 T
drbg.o drbg_sampler16_2_once T
drbg.o drbg_sampler16_2_once_customization T
little_endian.o u16_from_le T
little_endian.o u16_to_le T
little_endian.o u32_from_le T
little_endian.o u32_to_le T
little_endian.o u64_from_le T
little_endian.o u64_to_le T
little_endian.o u8_from_le T
little_endian.o u8_to_le T
misc.o ceil_log2 T
misc.o print_hex T
misc.o print_sage_s_matrix T
misc.o print_sage_s_vector T
misc.o print_sage_s_vector_matrix T
misc.o print_sage_u_matrix T
misc.o print_sage_u_vector T
misc.o print_sage_u_vector_matrix T
pack.o pack T
pack.o pack_ct T
pack.o pack_pk T
pack.o unpack T
pack.o unpack_ct T
pack.o unpack_pk T
parameters.o get_crypto_bytes T
parameters.o get_crypto_cipher_text_bytes T
parameters.o get_crypto_public_key_bytes T
parameters.o get_crypto_secret_key_bytes T
parameters.o get_crypto_seed_bytes T
parameters.o r5_parameter_set_names C
parameters.o r5_parameter_sets C
parameters.o set_parameter_tau T
parameters.o set_parameter_tau2_len T
parameters.o set_parameters T
parameters.o set_parameters_from_api T
r5_cca_kem.o r5_cca_kem_decapsulate T
r5_cca_kem.o r5_cca_kem_encapsulate T
r5_cca_kem.o r5_cca_kem_keygen T
r5_cca_kem.o r5_parameter_set_names C
r5_cca_kem.o r5_parameter_sets C
r5_cca_pke.o r5_cca_pke_decrypt T
r5_cca_pke.o r5_cca_pke_encrypt T
r5_cca_pke.o r5_cca_pke_keygen T
r5_cca_pke.o r5_parameter_set_names C
r5_cca_pke.o r5_parameter_sets C
r5_core.o create_A T
r5_core.o create_R_T T
r5_core.o create_S_T T
r5_core.o decompress_matrix T
r5_core.o mult_matrix T
r5_core.o r5_parameter_set_names C
r5_core.o r5_parameter_sets C
r5_core.o round_matrix T
r5_core.o transpose_matrix T
r5_cpa_kem.o r5_cpa_kem_decapsulate T
r5_cpa_kem.o r5_cpa_kem_encapsulate T
r5_cpa_kem.o r5_cpa_kem_keygen T
r5_cpa_kem.o r5_parameter_set_names C
r5_cpa_kem.o r5_parameter_sets C
r5_cpa_pke.o r5_cpa_pke_decrypt T
r5_cpa_pke.o r5_cpa_pke_encrypt T
r5_cpa_pke.o r5_cpa_pke_keygen T
r5_cpa_pke.o r5_parameter_set_names C
r5_cpa_pke.o r5_parameter_sets C
r5_dem.o round5_dem T
r5_dem.o round5_dem_inverse T
r5_hash.o hash T
r5_hash.o hash_customization T
r5_memory.o checked_calloc T
r5_memory.o checked_malloc T
r5_memory.o checked_realloc T
r5_memory.o conditional_constant_time_memcpy T
r5_memory.o constant_time_memcmp T
r5_parameter_sets.o r5_parameter_set_names D
r5_parameter_sets.o r5_parameter_sets R
shake.o cshake128 T
shake.o cshake128_absorb T
shake.o cshake128_init T
shake.o cshake128_squeezeblocks T
shake.o cshake256 T
shake.o cshake256_absorb T
shake.o cshake256_init T
shake.o cshake256_squeezeblocks T
shake.o shake128 T
shake.o shake128_absorb T
shake.o shake128_init T
shake.o shake128_squeezeblocks T
shake.o shake256 T
shake.o shake256_absorb T
shake.o shake256_init T
shake.o shake256_squeezeblocks T
xef_ref.o xef_compute T
xef_ref.o xef_fixerr T
xef_ref.o xef_reg R

Number of similar (compiler,implementation) pairs: 9, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref