Implementation notes: amd64, firefly, crypto_sign/falcon512dyn

Computer: firefly
Architecture: amd64
CPU ID: AuthenticAMD-00800f12-178bfbff
SUPERCOP version: 20201130
Operation: crypto_sign
Primitive: falcon512dyn

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
1027962	88944 0 0	109448 832 1624	`T:avx2`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20201213	20201130
1134613	154138 0 0	174149 808 1592	`T:fpu`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
1259733	158401 0 0	178480 816 1592	`T:avx2`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
1277466	158401 0 0	178480 816 1592	`T:avx2`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
1319234	165167 0 0	186088 816 1592	`T:avx2`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
1373583	86024 0 0	106344 832 1624	`T:avx2`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20201213	20201130
1401275	192575 0 0	214816 832 1624	`T:avx2`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20201213	20201130
1456659	81007 0 0	99782 808 1592	`T:avx2`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
1584378	160656 0 0	181557 808 1592	`T:fpu`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
1620258	189581 0 0	211848 832 1624	`T:fpu`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20201213	20201130
1695721	74596 0 0	93908 824 1592	`T:avx2`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20201213	20201130
1715271	154138 0 0	174149 808 1592	`T:fpu`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
1740387	78589 0 0	97267 800 1592	`T:fpu`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
1795035	86118 0 0	106672 832 1624	`T:fpu`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20201213	20201130
1811963	159124 0 0	178597 808 1592	`T:fpu`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
1867692	83314 0 0	103640 832 1624	`T:fpu`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20201213	20201130
2141277	71589 0 0	90884 824 1592	`T:fpu`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20201213	20201130
15462371	93759 0 0	114384 832 1624	`T:ref`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20201213	20201130
15877314	91370 0 0	111808 832 1624	`T:ref`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20201213	20201130
19780161	147347 0 0	167613 808 1592	`T:ref`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
20194000	78299 0 0	97828 824 1592	`T:ref`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20201213	20201130
20598869	147347 0 0	167613 808 1592	`T:ref`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
21051555	161832 0 0	181573 808 1592	`T:ref`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
21307706	155289 0 0	176501 808 1592	`T:ref`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
21473628	86320 0 0	105299 800 1592	`T:ref`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
21480229	177813 0 0	200040 832 1624	`T:ref`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20201213	20201130

Compiler output

Implementation: T:avx2
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

rng.c: fatal error: error in backend: Do not know how to split this operator's operand!
rng.c:
rng.c: clang: error: clang frontend command failed with exit code 70 (use -v to see invocation)
rng.c: clang version 3.8.1-24 (tags/RELEASE_381/final)
rng.c: Target: x86_64-pc-linux-gnu
rng.c: Thread model: posix
rng.c: InstalledDir: /usr/bin
rng.c: clang: note: diagnostic msg: PLEASE submit a bug report to http://llvm.org/bugs/ and include the crash backtrace, preprocessed source, and associated run script.
rng.c: clang: note: diagnostic msg:
rng.c: ********************
rng.c:
rng.c: PLEASE ATTACH THE FOLLOWING FILES TO THE BUG REPORT:
rng.c: Preprocessed source(s) and associated run script(s) are located at:
rng.c: clang: note: diagnostic msg: /tmp/rng-87ecc3.c
rng.c: clang: note: diagnostic msg: /tmp/rng-87ecc3.sh
rng.c: clang: note: diagnostic msg:
rng.c:
rng.c: ********************

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2

Namespace violations

Implementation: T:avx2
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

codec.o falcon512dyn_avx2_comp_decode T
codec.o falcon512dyn_avx2_comp_encode T
codec.o falcon512dyn_avx2_max_FG_bits R
codec.o falcon512dyn_avx2_max_fg_bits R
codec.o falcon512dyn_avx2_max_sig_bits R
codec.o falcon512dyn_avx2_modq_decode T
codec.o falcon512dyn_avx2_modq_encode T
codec.o falcon512dyn_avx2_trim_i16_decode T
codec.o falcon512dyn_avx2_trim_i16_encode T
codec.o falcon512dyn_avx2_trim_i8_decode T
codec.o falcon512dyn_avx2_trim_i8_encode T
common.o falcon512dyn_avx2_hash_to_point_ct T
common.o falcon512dyn_avx2_hash_to_point_vartime T
common.o falcon512dyn_avx2_is_short T
common.o falcon512dyn_avx2_is_short_half T
fft.o falcon512dyn_avx2_FFT T
fft.o falcon512dyn_avx2_iFFT T
fft.o falcon512dyn_avx2_poly_LDL_fft T
fft.o falcon512dyn_avx2_poly_LDLmv_fft T
fft.o falcon512dyn_avx2_poly_add T
fft.o falcon512dyn_avx2_poly_add_muladj_fft T
fft.o falcon512dyn_avx2_poly_adj_fft T
fft.o falcon512dyn_avx2_poly_div_autoadj_fft T
fft.o falcon512dyn_avx2_poly_div_fft T
fft.o falcon512dyn_avx2_poly_invnorm2_fft T
fft.o falcon512dyn_avx2_poly_merge_fft T
fft.o falcon512dyn_avx2_poly_mul_autoadj_fft T
fft.o falcon512dyn_avx2_poly_mul_fft T
fft.o falcon512dyn_avx2_poly_muladj_fft T
fft.o falcon512dyn_avx2_poly_mulconst T
fft.o falcon512dyn_avx2_poly_mulselfadj_fft T
fft.o falcon512dyn_avx2_poly_neg T
fft.o falcon512dyn_avx2_poly_split_fft T
fft.o falcon512dyn_avx2_poly_sub T
fpr.o falcon512dyn_avx2_fpr_gm_tab R
fpr.o falcon512dyn_avx2_fpr_p2_tab R
keygen.o falcon512dyn_avx2_keygen T
rng.o falcon512dyn_avx2_get_seed T
rng.o falcon512dyn_avx2_prng_get_bytes T
rng.o falcon512dyn_avx2_prng_init T
rng.o falcon512dyn_avx2_prng_refill T
shake.o falcon512dyn_avx2_i_shake256_extract T
shake.o falcon512dyn_avx2_i_shake256_flip T
shake.o falcon512dyn_avx2_i_shake256_init T
shake.o falcon512dyn_avx2_i_shake256_inject T
sign.o falcon512dyn_avx2_expand_privkey T
sign.o falcon512dyn_avx2_gaussian0_sampler T
sign.o falcon512dyn_avx2_sampler T
sign.o falcon512dyn_avx2_sign_dyn T
sign.o falcon512dyn_avx2_sign_tree T
vrfy.o falcon512dyn_avx2_complete_private T
vrfy.o falcon512dyn_avx2_compute_public T
vrfy.o falcon512dyn_avx2_count_nttzero T
vrfy.o falcon512dyn_avx2_is_invertible T
vrfy.o falcon512dyn_avx2_to_ntt_monty T
vrfy.o falcon512dyn_avx2_verify_raw T
vrfy.o falcon512dyn_avx2_verify_recover T

Number of similar (compiler,implementation) pairs: 8, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2

Namespace violations

Implementation: T:fpu
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

codec.o falcon512dyn_fpu_comp_decode T
codec.o falcon512dyn_fpu_comp_encode T
codec.o falcon512dyn_fpu_max_FG_bits R
codec.o falcon512dyn_fpu_max_fg_bits R
codec.o falcon512dyn_fpu_max_sig_bits R
codec.o falcon512dyn_fpu_modq_decode T
codec.o falcon512dyn_fpu_modq_encode T
codec.o falcon512dyn_fpu_trim_i16_decode T
codec.o falcon512dyn_fpu_trim_i16_encode T
codec.o falcon512dyn_fpu_trim_i8_decode T
codec.o falcon512dyn_fpu_trim_i8_encode T
common.o falcon512dyn_fpu_hash_to_point_ct T
common.o falcon512dyn_fpu_hash_to_point_vartime T
common.o falcon512dyn_fpu_is_short T
common.o falcon512dyn_fpu_is_short_half T
fft.o falcon512dyn_fpu_FFT T
fft.o falcon512dyn_fpu_iFFT T
fft.o falcon512dyn_fpu_poly_LDL_fft T
fft.o falcon512dyn_fpu_poly_LDLmv_fft T
fft.o falcon512dyn_fpu_poly_add T
fft.o falcon512dyn_fpu_poly_add_muladj_fft T
fft.o falcon512dyn_fpu_poly_adj_fft T
fft.o falcon512dyn_fpu_poly_div_autoadj_fft T
fft.o falcon512dyn_fpu_poly_div_fft T
fft.o falcon512dyn_fpu_poly_invnorm2_fft T
fft.o falcon512dyn_fpu_poly_merge_fft T
fft.o falcon512dyn_fpu_poly_mul_autoadj_fft T
fft.o falcon512dyn_fpu_poly_mul_fft T
fft.o falcon512dyn_fpu_poly_muladj_fft T
fft.o falcon512dyn_fpu_poly_mulconst T
fft.o falcon512dyn_fpu_poly_mulselfadj_fft T
fft.o falcon512dyn_fpu_poly_neg T
fft.o falcon512dyn_fpu_poly_split_fft T
fft.o falcon512dyn_fpu_poly_sub T
fpr.o falcon512dyn_fpu_fpr_gm_tab R
fpr.o falcon512dyn_fpu_fpr_p2_tab R
keygen.o falcon512dyn_fpu_keygen T
rng.o falcon512dyn_fpu_get_seed T
rng.o falcon512dyn_fpu_prng_get_bytes T
rng.o falcon512dyn_fpu_prng_init T
rng.o falcon512dyn_fpu_prng_refill T
shake.o falcon512dyn_fpu_i_shake256_extract T
shake.o falcon512dyn_fpu_i_shake256_flip T
shake.o falcon512dyn_fpu_i_shake256_init T
shake.o falcon512dyn_fpu_i_shake256_inject T
sign.o falcon512dyn_fpu_expand_privkey T
sign.o falcon512dyn_fpu_gaussian0_sampler T
sign.o falcon512dyn_fpu_sampler T
sign.o falcon512dyn_fpu_sign_dyn T
sign.o falcon512dyn_fpu_sign_tree T
vrfy.o falcon512dyn_fpu_complete_private T
vrfy.o falcon512dyn_fpu_compute_public T
vrfy.o falcon512dyn_fpu_count_nttzero T
vrfy.o falcon512dyn_fpu_is_invertible T
vrfy.o falcon512dyn_fpu_to_ntt_monty T
vrfy.o falcon512dyn_fpu_verify_raw T
vrfy.o falcon512dyn_fpu_verify_recover T

Number of similar (compiler,implementation) pairs: 9, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:fpu
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:fpu
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:fpu
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:fpu
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:fpu
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:fpu
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:fpu
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:fpu
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:fpu

Namespace violations

Implementation: T:ref
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

codec.o falcon512dyn_ref_comp_decode T
codec.o falcon512dyn_ref_comp_encode T
codec.o falcon512dyn_ref_max_FG_bits R
codec.o falcon512dyn_ref_max_fg_bits R
codec.o falcon512dyn_ref_max_sig_bits R
codec.o falcon512dyn_ref_modq_decode T
codec.o falcon512dyn_ref_modq_encode T
codec.o falcon512dyn_ref_trim_i16_decode T
codec.o falcon512dyn_ref_trim_i16_encode T
codec.o falcon512dyn_ref_trim_i8_decode T
codec.o falcon512dyn_ref_trim_i8_encode T
common.o falcon512dyn_ref_hash_to_point_ct T
common.o falcon512dyn_ref_hash_to_point_vartime T
common.o falcon512dyn_ref_is_short T
common.o falcon512dyn_ref_is_short_half T
fft.o falcon512dyn_ref_FFT T
fft.o falcon512dyn_ref_iFFT T
fft.o falcon512dyn_ref_poly_LDL_fft T
fft.o falcon512dyn_ref_poly_LDLmv_fft T
fft.o falcon512dyn_ref_poly_add T
fft.o falcon512dyn_ref_poly_add_muladj_fft T
fft.o falcon512dyn_ref_poly_adj_fft T
fft.o falcon512dyn_ref_poly_div_autoadj_fft T
fft.o falcon512dyn_ref_poly_div_fft T
fft.o falcon512dyn_ref_poly_invnorm2_fft T
fft.o falcon512dyn_ref_poly_merge_fft T
fft.o falcon512dyn_ref_poly_mul_autoadj_fft T
fft.o falcon512dyn_ref_poly_mul_fft T
fft.o falcon512dyn_ref_poly_muladj_fft T
fft.o falcon512dyn_ref_poly_mulconst T
fft.o falcon512dyn_ref_poly_mulselfadj_fft T
fft.o falcon512dyn_ref_poly_neg T
fft.o falcon512dyn_ref_poly_split_fft T
fft.o falcon512dyn_ref_poly_sub T
fpr.o falcon512dyn_ref_fpr_add T
fpr.o falcon512dyn_ref_fpr_div T
fpr.o falcon512dyn_ref_fpr_expm_p63 T
fpr.o falcon512dyn_ref_fpr_gm_tab R
fpr.o falcon512dyn_ref_fpr_mul T
fpr.o falcon512dyn_ref_fpr_p2_tab R
fpr.o falcon512dyn_ref_fpr_scaled T
fpr.o falcon512dyn_ref_fpr_sqrt T
keygen.o falcon512dyn_ref_keygen T
rng.o falcon512dyn_ref_get_seed T
rng.o falcon512dyn_ref_prng_get_bytes T
rng.o falcon512dyn_ref_prng_init T
rng.o falcon512dyn_ref_prng_refill T
shake.o falcon512dyn_ref_i_shake256_extract T
shake.o falcon512dyn_ref_i_shake256_flip T
shake.o falcon512dyn_ref_i_shake256_init T
shake.o falcon512dyn_ref_i_shake256_inject T
sign.o falcon512dyn_ref_expand_privkey T
sign.o falcon512dyn_ref_gaussian0_sampler T
sign.o falcon512dyn_ref_sampler T
sign.o falcon512dyn_ref_sign_dyn T
sign.o falcon512dyn_ref_sign_tree T
vrfy.o falcon512dyn_ref_complete_private T
vrfy.o falcon512dyn_ref_compute_public T
vrfy.o falcon512dyn_ref_count_nttzero T
vrfy.o falcon512dyn_ref_is_invertible T
vrfy.o falcon512dyn_ref_to_ntt_monty T
vrfy.o falcon512dyn_ref_verify_raw T
vrfy.o falcon512dyn_ref_verify_recover T

Number of similar (compiler,implementation) pairs: 9, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref