Implementation notes: amd64, firefly, crypto_sign/falcon512tree

Computer: firefly
Architecture: amd64
CPU ID: AuthenticAMD-00800f12-178bfbff
SUPERCOP version: 20201130
Operation: crypto_sign
Primitive: falcon512tree

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
725374	158041 0 0	178105 816 1592	`T:avx2`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
739266	164807 0 0	185777 816 1592	`T:avx2`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
768085	158041 0 0	178105 816 1592	`T:avx2`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
780965	160472 0 0	181373 808 1592	`T:fpu`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
782069	88552 0 0	109024 832 1624	`T:avx2`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20201213	20201130
816293	153954 0 0	173965 808 1592	`T:fpu`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
820111	192183 0 0	214392 832 1624	`T:avx2`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20201213	20201130
832370	80651 0 0	99407 808 1592	`T:avx2`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
888191	83066 0 0	103344 832 1624	`T:fpu`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20201213	20201130
902221	74210 0 0	93484 824 1592	`T:avx2`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20201213	20201130
916826	85587 0 0	105848 832 1624	`T:avx2`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20201213	20201130
1088682	192509 0 0	214704 832 1624	`T:fpu`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20201213	20201130
1138753	85934 0 0	106448 832 1624	`T:fpu`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20201213	20201130
1208903	158956 0 0	178413 808 1592	`T:fpu`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
1226268	153954 0 0	173965 808 1592	`T:fpu`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
1275695	71413 0 0	90756 824 1592	`T:fpu`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20201213	20201130
1396514	78389 0 0	97099 800 1592	`T:fpu`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
8503767	180741 0 0	202896 832 1624	`T:ref`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20201213	20201130
9077433	91122 0 0	111512 832 1624	`T:ref`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20201213	20201130
9092659	147163 0 0	167429 808 1592	`T:ref`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
9602960	86120 0 0	105131 800 1592	`T:ref`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
9964428	155105 0 0	176317 808 1592	`T:ref`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
9970799	93575 0 0	114160 832 1624	`T:ref`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20201213	20201130
10162044	147163 0 0	167429 808 1592	`T:ref`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130
10259242	78123 0 0	97636 824 1592	`T:ref`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20201213	20201130
10412560	161664 0 0	181389 808 1592	`T:ref`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20201213	20201130

Compiler output

Implementation: T:avx2
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

rng.c: fatal error: error in backend: Do not know how to split this operator's operand!
rng.c:
rng.c: clang: error: clang frontend command failed with exit code 70 (use -v to see invocation)
rng.c: clang version 3.8.1-24 (tags/RELEASE_381/final)
rng.c: Target: x86_64-pc-linux-gnu
rng.c: Thread model: posix
rng.c: InstalledDir: /usr/bin
rng.c: clang: note: diagnostic msg: PLEASE submit a bug report to http://llvm.org/bugs/ and include the crash backtrace, preprocessed source, and associated run script.
rng.c: clang: note: diagnostic msg:
rng.c: ********************
rng.c:
rng.c: PLEASE ATTACH THE FOLLOWING FILES TO THE BUG REPORT:
rng.c: Preprocessed source(s) and associated run script(s) are located at:
rng.c: clang: note: diagnostic msg: /tmp/rng-693bec.c
rng.c: clang: note: diagnostic msg: /tmp/rng-693bec.sh
rng.c: clang: note: diagnostic msg:
rng.c:
rng.c: ********************

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2

Namespace violations

Implementation: T:avx2
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

codec.o falcon512tree_avx2_comp_decode T
codec.o falcon512tree_avx2_comp_encode T
codec.o falcon512tree_avx2_max_FG_bits R
codec.o falcon512tree_avx2_max_fg_bits R
codec.o falcon512tree_avx2_max_sig_bits R
codec.o falcon512tree_avx2_modq_decode T
codec.o falcon512tree_avx2_modq_encode T
codec.o falcon512tree_avx2_trim_i16_decode T
codec.o falcon512tree_avx2_trim_i16_encode T
codec.o falcon512tree_avx2_trim_i8_decode T
codec.o falcon512tree_avx2_trim_i8_encode T
common.o falcon512tree_avx2_hash_to_point_ct T
common.o falcon512tree_avx2_hash_to_point_vartime T
common.o falcon512tree_avx2_is_short T
common.o falcon512tree_avx2_is_short_half T
fft.o falcon512tree_avx2_FFT T
fft.o falcon512tree_avx2_iFFT T
fft.o falcon512tree_avx2_poly_LDL_fft T
fft.o falcon512tree_avx2_poly_LDLmv_fft T
fft.o falcon512tree_avx2_poly_add T
fft.o falcon512tree_avx2_poly_add_muladj_fft T
fft.o falcon512tree_avx2_poly_adj_fft T
fft.o falcon512tree_avx2_poly_div_autoadj_fft T
fft.o falcon512tree_avx2_poly_div_fft T
fft.o falcon512tree_avx2_poly_invnorm2_fft T
fft.o falcon512tree_avx2_poly_merge_fft T
fft.o falcon512tree_avx2_poly_mul_autoadj_fft T
fft.o falcon512tree_avx2_poly_mul_fft T
fft.o falcon512tree_avx2_poly_muladj_fft T
fft.o falcon512tree_avx2_poly_mulconst T
fft.o falcon512tree_avx2_poly_mulselfadj_fft T
fft.o falcon512tree_avx2_poly_neg T
fft.o falcon512tree_avx2_poly_split_fft T
fft.o falcon512tree_avx2_poly_sub T
fpr.o falcon512tree_avx2_fpr_gm_tab R
fpr.o falcon512tree_avx2_fpr_p2_tab R
keygen.o falcon512tree_avx2_keygen T
rng.o falcon512tree_avx2_get_seed T
rng.o falcon512tree_avx2_prng_get_bytes T
rng.o falcon512tree_avx2_prng_init T
rng.o falcon512tree_avx2_prng_refill T
shake.o falcon512tree_avx2_i_shake256_extract T
shake.o falcon512tree_avx2_i_shake256_flip T
shake.o falcon512tree_avx2_i_shake256_init T
shake.o falcon512tree_avx2_i_shake256_inject T
sign.o falcon512tree_avx2_expand_privkey T
sign.o falcon512tree_avx2_gaussian0_sampler T
sign.o falcon512tree_avx2_sampler T
sign.o falcon512tree_avx2_sign_dyn T
sign.o falcon512tree_avx2_sign_tree T
vrfy.o falcon512tree_avx2_complete_private T
vrfy.o falcon512tree_avx2_compute_public T
vrfy.o falcon512tree_avx2_count_nttzero T
vrfy.o falcon512tree_avx2_is_invertible T
vrfy.o falcon512tree_avx2_to_ntt_monty T
vrfy.o falcon512tree_avx2_verify_raw T
vrfy.o falcon512tree_avx2_verify_recover T

Number of similar (compiler,implementation) pairs: 8, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx2

Namespace violations

Implementation: T:fpu
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

codec.o falcon512tree_fpu_comp_decode T
codec.o falcon512tree_fpu_comp_encode T
codec.o falcon512tree_fpu_max_FG_bits R
codec.o falcon512tree_fpu_max_fg_bits R
codec.o falcon512tree_fpu_max_sig_bits R
codec.o falcon512tree_fpu_modq_decode T
codec.o falcon512tree_fpu_modq_encode T
codec.o falcon512tree_fpu_trim_i16_decode T
codec.o falcon512tree_fpu_trim_i16_encode T
codec.o falcon512tree_fpu_trim_i8_decode T
codec.o falcon512tree_fpu_trim_i8_encode T
common.o falcon512tree_fpu_hash_to_point_ct T
common.o falcon512tree_fpu_hash_to_point_vartime T
common.o falcon512tree_fpu_is_short T
common.o falcon512tree_fpu_is_short_half T
fft.o falcon512tree_fpu_FFT T
fft.o falcon512tree_fpu_iFFT T
fft.o falcon512tree_fpu_poly_LDL_fft T
fft.o falcon512tree_fpu_poly_LDLmv_fft T
fft.o falcon512tree_fpu_poly_add T
fft.o falcon512tree_fpu_poly_add_muladj_fft T
fft.o falcon512tree_fpu_poly_adj_fft T
fft.o falcon512tree_fpu_poly_div_autoadj_fft T
fft.o falcon512tree_fpu_poly_div_fft T
fft.o falcon512tree_fpu_poly_invnorm2_fft T
fft.o falcon512tree_fpu_poly_merge_fft T
fft.o falcon512tree_fpu_poly_mul_autoadj_fft T
fft.o falcon512tree_fpu_poly_mul_fft T
fft.o falcon512tree_fpu_poly_muladj_fft T
fft.o falcon512tree_fpu_poly_mulconst T
fft.o falcon512tree_fpu_poly_mulselfadj_fft T
fft.o falcon512tree_fpu_poly_neg T
fft.o falcon512tree_fpu_poly_split_fft T
fft.o falcon512tree_fpu_poly_sub T
fpr.o falcon512tree_fpu_fpr_gm_tab R
fpr.o falcon512tree_fpu_fpr_p2_tab R
keygen.o falcon512tree_fpu_keygen T
rng.o falcon512tree_fpu_get_seed T
rng.o falcon512tree_fpu_prng_get_bytes T
rng.o falcon512tree_fpu_prng_init T
rng.o falcon512tree_fpu_prng_refill T
shake.o falcon512tree_fpu_i_shake256_extract T
shake.o falcon512tree_fpu_i_shake256_flip T
shake.o falcon512tree_fpu_i_shake256_init T
shake.o falcon512tree_fpu_i_shake256_inject T
sign.o falcon512tree_fpu_expand_privkey T
sign.o falcon512tree_fpu_gaussian0_sampler T
sign.o falcon512tree_fpu_sampler T
sign.o falcon512tree_fpu_sign_dyn T
sign.o falcon512tree_fpu_sign_tree T
vrfy.o falcon512tree_fpu_complete_private T
vrfy.o falcon512tree_fpu_compute_public T
vrfy.o falcon512tree_fpu_count_nttzero T
vrfy.o falcon512tree_fpu_is_invertible T
vrfy.o falcon512tree_fpu_to_ntt_monty T
vrfy.o falcon512tree_fpu_verify_raw T
vrfy.o falcon512tree_fpu_verify_recover T

Number of similar (compiler,implementation) pairs: 9, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:fpu
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:fpu
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:fpu
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:fpu
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:fpu
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:fpu
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:fpu
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:fpu
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:fpu

Namespace violations

Implementation: T:ref
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

codec.o falcon512tree_ref_comp_decode T
codec.o falcon512tree_ref_comp_encode T
codec.o falcon512tree_ref_max_FG_bits R
codec.o falcon512tree_ref_max_fg_bits R
codec.o falcon512tree_ref_max_sig_bits R
codec.o falcon512tree_ref_modq_decode T
codec.o falcon512tree_ref_modq_encode T
codec.o falcon512tree_ref_trim_i16_decode T
codec.o falcon512tree_ref_trim_i16_encode T
codec.o falcon512tree_ref_trim_i8_decode T
codec.o falcon512tree_ref_trim_i8_encode T
common.o falcon512tree_ref_hash_to_point_ct T
common.o falcon512tree_ref_hash_to_point_vartime T
common.o falcon512tree_ref_is_short T
common.o falcon512tree_ref_is_short_half T
fft.o falcon512tree_ref_FFT T
fft.o falcon512tree_ref_iFFT T
fft.o falcon512tree_ref_poly_LDL_fft T
fft.o falcon512tree_ref_poly_LDLmv_fft T
fft.o falcon512tree_ref_poly_add T
fft.o falcon512tree_ref_poly_add_muladj_fft T
fft.o falcon512tree_ref_poly_adj_fft T
fft.o falcon512tree_ref_poly_div_autoadj_fft T
fft.o falcon512tree_ref_poly_div_fft T
fft.o falcon512tree_ref_poly_invnorm2_fft T
fft.o falcon512tree_ref_poly_merge_fft T
fft.o falcon512tree_ref_poly_mul_autoadj_fft T
fft.o falcon512tree_ref_poly_mul_fft T
fft.o falcon512tree_ref_poly_muladj_fft T
fft.o falcon512tree_ref_poly_mulconst T
fft.o falcon512tree_ref_poly_mulselfadj_fft T
fft.o falcon512tree_ref_poly_neg T
fft.o falcon512tree_ref_poly_split_fft T
fft.o falcon512tree_ref_poly_sub T
fpr.o falcon512tree_ref_fpr_add T
fpr.o falcon512tree_ref_fpr_div T
fpr.o falcon512tree_ref_fpr_expm_p63 T
fpr.o falcon512tree_ref_fpr_gm_tab R
fpr.o falcon512tree_ref_fpr_mul T
fpr.o falcon512tree_ref_fpr_p2_tab R
fpr.o falcon512tree_ref_fpr_scaled T
fpr.o falcon512tree_ref_fpr_sqrt T
keygen.o falcon512tree_ref_keygen T
rng.o falcon512tree_ref_get_seed T
rng.o falcon512tree_ref_prng_get_bytes T
rng.o falcon512tree_ref_prng_init T
rng.o falcon512tree_ref_prng_refill T
shake.o falcon512tree_ref_i_shake256_extract T
shake.o falcon512tree_ref_i_shake256_flip T
shake.o falcon512tree_ref_i_shake256_init T
shake.o falcon512tree_ref_i_shake256_inject T
sign.o falcon512tree_ref_expand_privkey T
sign.o falcon512tree_ref_gaussian0_sampler T
sign.o falcon512tree_ref_sampler T
sign.o falcon512tree_ref_sign_dyn T
sign.o falcon512tree_ref_sign_tree T
vrfy.o falcon512tree_ref_complete_private T
vrfy.o falcon512tree_ref_compute_public T
vrfy.o falcon512tree_ref_count_nttzero T
vrfy.o falcon512tree_ref_is_invertible T
vrfy.o falcon512tree_ref_to_ntt_monty T
vrfy.o falcon512tree_ref_verify_raw T
vrfy.o falcon512tree_ref_verify_recover T

Number of similar (compiler,implementation) pairs: 9, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref