Implementation notes: amd64, gcc14, crypto_aead/deoxysneq256128v1

Computer: gcc14
Architecture: amd64
CPU ID: GenuineIntel-00010676-bfebfbff
SUPERCOP version: 20220506
Operation: crypto_aead
Primitive: deoxysneq256128v1

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
1658816	29595 0 0	44771 820 1008	`T:ref`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210114	20210114
1664569	29545 0 0	44851 820 1008	`T:ref`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210114	20210114
1815533	31049 0 0	45419 820 1008	`T:ref`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210114	20210114
1841580	31049 0 0	45419 820 1008	`T:ref`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210114	20210114
2015260	29735 0 0	46486 844 1040	`T:ref`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210114	20210114
3790124	23998 0 0	37229 812 1008	`T:ref`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20210114	20210114
3830740	24957 0 0	39830 844 1040	`T:ref`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210114	20210114
5192274	22925 0 0	36281 820 1040	`T:ref`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210114	20210114
5735257	23766 0 0	38414 844 1040	`T:ref`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20210114	20210114

Compiler output

Implementation: T:opt
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

deoxys-256.c: deoxys-256.c:120:4: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'deoxys_aead_encrypt' that is compiled without support for 'aes'
deoxys-256.c: AES( State, subkeys, Tweak, tTweak );
deoxys-256.c: ^
deoxys-256.c: ./tweakable-cipher.macros:79:5: note: expanded from macro 'AES'
deoxys-256.c: s = enc( s , xor( subkeys[ 1] , t ) );t=permute( t , H_PERMUTATION);\
deoxys-256.c: ^
deoxys-256.c: ./tweakable-cipher.macros:1:18: note: expanded from macro 'enc'
deoxys-256.c: #define enc(a,b) _mm_aesenc_si128(a,b)
deoxys-256.c: ^
deoxys-256.c: deoxys-256.c:120:4: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'deoxys_aead_encrypt' that is compiled without support for 'aes'
deoxys-256.c: ./tweakable-cipher.macros:80:5: note: expanded from macro 'AES'
deoxys-256.c: s = enc( s , xor( subkeys[ 2] , t ) );t=permute( t , H_PERMUTATION);\
deoxys-256.c: ^
deoxys-256.c: ./tweakable-cipher.macros:1:18: note: expanded from macro 'enc'
deoxys-256.c: #define enc(a,b) _mm_aesenc_si128(a,b)
deoxys-256.c: ^
deoxys-256.c: deoxys-256.c:120:4: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'deoxys_aead_encrypt' that is compiled without support for 'aes'
deoxys-256.c: ./tweakable-cipher.macros:81:5: note: expanded from macro 'AES'
deoxys-256.c: s = enc( s , xor( subkeys[ 3] , t ) );t=permute( t , H_PERMUTATION);\
deoxys-256.c: ^
deoxys-256.c: ./tweakable-cipher.macros:1:18: note: expanded from macro 'enc'
deoxys-256.c: #define enc(a,b) _mm_aesenc_si128(a,b)
deoxys-256.c: ^
deoxys-256.c: deoxys-256.c:120:4: error: always_inline function '_mm_aesenc_si128' requires target feature 'aes', but would be inlined into function 'deoxys_aead_encrypt' that is compiled without support for 'aes'
deoxys-256.c: ./tweakable-cipher.macros:82:5: note: expanded from macro 'AES'
deoxys-256.c: ...

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt

Compiler output

Implementation: T:opt
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

deoxys-256.c: deoxys-256.c:96:13: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'deoxys_aead_encrypt' that is compiled without support for 'ssse3'
deoxys-256.c: tmp = permute( tmp, H_PERMUTATION );
deoxys-256.c: ^
deoxys-256.c: ./tweakable-cipher.macros:7:22: note: expanded from macro 'permute'
deoxys-256.c: #define permute(a,b) _mm_shuffle_epi8(a,b)
deoxys-256.c: ^
deoxys-256.c: deoxys-256.c:104:5: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'deoxys_aead_encrypt' that is compiled without support for 'ssse3'
deoxys-256.c: TWEAKEY_SCHEDULE3( tsubkeys1,tsubkeys2,subkeys, key);
deoxys-256.c: ^
deoxys-256.c: ./tweakable-cipher.macros:37:3: note: expanded from macro 'TWEAKEY_SCHEDULE3'
deoxys-256.c: ONE_KEY_ROUND( subkeys1[ 0], subkeys1[ 1], subkeys2[ 0], subkeys2[ 1] ); ts[ 1] = xor( xor(subkeys1[ 1],subkeys2[ 1]), RCONS[ 1] ); \
deoxys-256.c: ^
deoxys-256.c: ./tweakable-cipher.macros:27:3: note: expanded from macro 'ONE_KEY_ROUND'
deoxys-256.c: TIMES2( key1, new_key2 );\
deoxys-256.c: ^
deoxys-256.c: ./tweakable-cipher.macros:21:14: note: expanded from macro 'TIMES2'
deoxys-256.c: rot_cons = _mm_shuffle_epi8( simply_1b, multi_mask); \
deoxys-256.c: ^
deoxys-256.c: deoxys-256.c:104:5: error: always_inline function '_mm_shuffle_epi8' requires target feature 'ssse3', but would be inlined into function 'deoxys_aead_encrypt' that is compiled without support for 'ssse3'
deoxys-256.c: ./tweakable-cipher.macros:37:3: note: expanded from macro 'TWEAKEY_SCHEDULE3'
deoxys-256.c: ONE_KEY_ROUND( subkeys1[ 0], subkeys1[ 1], subkeys2[ 0], subkeys2[ 1] ); ts[ 1] = xor( xor(subkeys1[ 1],subkeys2[ 1]), RCONS[ 1] ); \
deoxys-256.c: ^
deoxys-256.c: ./tweakable-cipher.macros:28:3: note: expanded from macro 'ONE_KEY_ROUND'
deoxys-256.c: TIMES2( new_key2, new_key1 );\
deoxys-256.c: ^
deoxys-256.c: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:opt

Compiler output

Implementation: T:opt
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

deoxys-256.c: In file included from deoxys-256.c:28:0:
deoxys-256.c: deoxys-256.c: In function 'deoxys_aead_encrypt':
deoxys-256.c: /usr/lib/gcc/x86_64-linux-gnu/6/include/wmmintrin.h:61:1: error: inlining failed in call to always_inline '_mm_aesenc_si128': target specific option mismatch
deoxys-256.c: _mm_aesenc_si128 (__m128i __X, __m128i __Y)
deoxys-256.c: ^~~~~~~~~~~~~~~~
deoxys-256.c: In file included from deoxys-256.c:30:0:
deoxys-256.c: tweakable-cipher.macros:94:3: note: called from here
deoxys-256.c: s = enc( s , xor( subkeys[16] , t ) );
deoxys-256.c:
deoxys-256.c: deoxys-256.c:120:4: note: in expansion of macro 'AES'
deoxys-256.c: AES( State, subkeys, Tweak, tTweak );
deoxys-256.c: ^~~
deoxys-256.c: In file included from deoxys-256.c:28:0:
deoxys-256.c: /usr/lib/gcc/x86_64-linux-gnu/6/include/wmmintrin.h:61:1: error: inlining failed in call to always_inline '_mm_aesenc_si128': target specific option mismatch
deoxys-256.c: _mm_aesenc_si128 (__m128i __X, __m128i __Y)
deoxys-256.c: ^~~~~~~~~~~~~~~~
deoxys-256.c: In file included from deoxys-256.c:30:0:
deoxys-256.c: tweakable-cipher.macros:93:3: note: called from here
deoxys-256.c: s = enc( s , xor( subkeys[15] , t ) );t=permute( t , H_PERMUTATION);\
deoxys-256.c:
deoxys-256.c: deoxys-256.c:120:4: note: in expansion of macro 'AES'
deoxys-256.c: AES( State, subkeys, Tweak, tTweak );
deoxys-256.c: ^~~
deoxys-256.c: In file included from deoxys-256.c:28:0:
deoxys-256.c: /usr/lib/gcc/x86_64-linux-gnu/6/include/wmmintrin.h:61:1: error: inlining failed in call to always_inline '_mm_aesenc_si128': target specific option mismatch
deoxys-256.c: ...

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:opt

Namespace violations

Implementation: T:ref
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

deoxys.o deoxys_aead_decrypt T
deoxys.o deoxys_aead_encrypt T
tweakableBC.o G T
tweakableBC.o H T
tweakableBC.o aesTweakDecrypt T
tweakableBC.o aesTweakEncrypt T
tweakableBC.o deoxysKeySetupDec256 T
tweakableBC.o deoxysKeySetupEnc256 T
tweakableBC.o multi T

Number of similar (compiler,implementation) pairs: 9, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref