Implementation notes: amd64, gcc123, crypto_kem/ledakemcpa32

Computer: gcc123
Architecture: amd64
CPU ID: GenuineIntel-000206d7-bfebfbff
SUPERCOP version: 20220213
Operation: crypto_kem
Primitive: ledakemcpa32

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
8596366	44743 60 0	137434 892 1768	`T:portableopt`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210201	20210114

Compiler output

Implementation: T:portableopt
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

gf2x_arith.c: gf2x_arith.c:803:17: error: always_inline function '_mm256_xor_si256' requires target feature 'avx2', but would be inlined into function 'gf2x_exact_div_x_plus_one' that is compiled without support for 'avx2'
gf2x_arith.c: vec_t = _mm256_xor_si256(tmp,vec_t);
gf2x_arith.c: ^
gf2x_arith.c: gf2x_arith.c:806:15: error: always_inline function '_mm256_slli_epi64' requires target feature 'avx2', but would be inlined into function 'gf2x_exact_div_x_plus_one' that is compiled without support for 'avx2'
gf2x_arith.c: tmp = _mm256_slli_epi64(vec_t, j);
gf2x_arith.c: ^
gf2x_arith.c: gf2x_arith.c:807:21: error: always_inline function '_mm256_xor_si256' requires target feature 'avx2', but would be inlined into function 'gf2x_exact_div_x_plus_one' that is compiled without support for 'avx2'
gf2x_arith.c: vec_t = _mm256_xor_si256(tmp,vec_t);
gf2x_arith.c: ^
gf2x_arith.c: gf2x_arith.c:818:17: error: always_inline function '_mm256_xor_si256' requires target feature 'avx2', but would be inlined into function 'gf2x_exact_div_x_plus_one' that is compiled without support for 'avx2'
gf2x_arith.c: vec_t = _mm256_xor_si256(tmp,vec_t);
gf2x_arith.c: ^
gf2x_arith.c: gf2x_arith.c:824:17: error: always_inline function '_mm256_xor_si256' requires target feature 'avx2', but would be inlined into function 'gf2x_exact_div_x_plus_one' that is compiled without support for 'avx2'
gf2x_arith.c: vec_t = _mm256_xor_si256(tmp,vec_t);
gf2x_arith.c: ^
gf2x_arith.c: 5 errors generated.

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:portableopt
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:portableopt
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:portableopt
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:portableopt

Compiler output

Implementation: T:portableopt
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

gf2x_arith.c: In file included from /usr/lib/gcc/x86_64-linux-gnu/8/include/immintrin.h:43,
gf2x_arith.c: from /usr/lib/gcc/x86_64-linux-gnu/8/include/x86intrin.h:48,
gf2x_arith.c: from architecture_detect.h:41,
gf2x_arith.c: from gf2x_arith.h:34,
gf2x_arith.c: from gf2x_arith.c:31:
gf2x_arith.c: gf2x_arith.c: In function 'gf2x_exact_div_x_plus_one':
gf2x_arith.c: /usr/lib/gcc/x86_64-linux-gnu/8/include/avx2intrin.h:913:1: error: inlining failed in call to always_inline '_mm256_xor_si256': target specific option mismatch
gf2x_arith.c: _mm256_xor_si256 (__m256i __A, __m256i __B)
gf2x_arith.c: ^~~~~~~~~~~~~~~~
gf2x_arith.c: gf2x_arith.c:803:17: note: called from here
gf2x_arith.c: vec_t = _mm256_xor_si256(tmp,vec_t);
gf2x_arith.c: ^~~~~~~~~~~~~~~~~~~~~~~~~~~
gf2x_arith.c: In file included from /usr/lib/gcc/x86_64-linux-gnu/8/include/immintrin.h:43,
gf2x_arith.c: from /usr/lib/gcc/x86_64-linux-gnu/8/include/x86intrin.h:48,
gf2x_arith.c: from architecture_detect.h:41,
gf2x_arith.c: from gf2x_arith.h:34,
gf2x_arith.c: from gf2x_arith.c:31:
gf2x_arith.c: /usr/lib/gcc/x86_64-linux-gnu/8/include/avx2intrin.h:913:1: error: inlining failed in call to always_inline '_mm256_xor_si256': target specific option mismatch
gf2x_arith.c: _mm256_xor_si256 (__m256i __A, __m256i __B)
gf2x_arith.c: ^~~~~~~~~~~~~~~~
gf2x_arith.c: gf2x_arith.c:803:17: note: called from here
gf2x_arith.c: vec_t = _mm256_xor_si256(tmp,vec_t);
gf2x_arith.c: ^~~~~~~~~~~~~~~~~~~~~~~~~~~
gf2x_arith.c: In file included from /usr/lib/gcc/x86_64-linux-gnu/8/include/immintrin.h:43,
gf2x_arith.c: from /usr/lib/gcc/x86_64-linux-gnu/8/include/x86intrin.h:48,
gf2x_arith.c: ...

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:portableopt
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:portableopt
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:portableopt
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:portableopt

Namespace violations

Implementation: T:portableopt
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

H_Q_matrices_generation.o generateHPosOnes T
H_Q_matrices_generation.o transposeHPosOnes T
aes256.o rijndaelEncrypt T
aes256.o rijndaelKeySetupEnc T
bf_decoding.o bf_decoding_CT T
bf_decoding.o lift_mul_dense_to_sparse_CT T
djbsort.o int32_sort T
gf2x_arith.o gf2x_mul_Kar T
gf2x_arith.o gf2x_mul_TC3 T
gf2x_arith.o gf2x_mul_comb T
gf2x_arith_mod_xPplusOne.o gf2x_digit_times_poly_mul T
gf2x_arith_mod_xPplusOne.o gf2x_mod_fmac T
gf2x_arith_mod_xPplusOne.o gf2x_mod_inverse_KTT T
gf2x_arith_mod_xPplusOne.o gf2x_mod_mul T
gf2x_arith_mod_xPplusOne.o gf2x_mod_mul_dense_to_sparse T
gf2x_arith_mod_xPplusOne.o gf2x_mod_mul_monom T
gf2x_arith_mod_xPplusOne.o gf2x_transpose_in_place T
gf2x_arith_mod_xPplusOne.o rand_circulant_sparse_block T
gf2x_arith_mod_xPplusOne.o rand_error_pos T
gf2x_arith_mod_xPplusOne.o rand_error_pos_shake T
inverse_exp.o gf2x_mod_inverse_exp T
inverse_exp.o inverse_factors_table D
inverse_exp.o pow_2_A T
inverse_exp.o raise_2_i_clmul T
inverse_exp.o raise_2_i_factor_inverse_permute T
inverse_exp.o raise_2_i_hybrid T
niederreiter_decrypt.o decrypt_niederreiter_indcpa T
niederreiter_encrypt.o encrypt_niederreiter_indcpa T
niederreiter_keygen.o key_gen_niederreiter T
niederreiter_keygen.o privateKey_deletion_niederreiter T
niederreiter_keygen.o publicKey_deletion_niederreiter T
rng.o AES256_CTR_DRBG_Update T
rng.o AES256_ECB T
rng.o DRBG_ctx C
rng.o deterministic_random_byte_generator T
rng.o rand_range T
rng.o rand_range_shake T
rng.o seedexpander T
rng.o seedexpander_from_trng T
rng.o seedexpander_init T
rng.o shake_seedexpander_extract T
rng.o shake_seedexpander_init T

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:portableopt