Implementation notes: amd64, hiphop, crypto_kem/sikep751comp

Computer: hiphop
Microarchitecture: amd64; HW+AES (306c3)
Architecture: amd64
CPU ID: GenuineIntel-000306c3-bfebfbff
SUPERCOP version: 20221122
Operation: crypto_kem
Primitive: sikep751comp
TimeObject sizeTest sizeImplementationCompilerBenchmark dateSUPERCOP version
1921665551078389 0 81099996 812 1712T:mulxclang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE2021110820211108
1925156581072501 0 81094076 812 1712T:mulxclang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE2021110820211108
1925519271072501 0 81094076 812 1712T:mulxclang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE2021110820211108
193025991942403 0 8961226 804 1712T:mulxclang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE2021110820211108
1940105841111914 0 81132740 812 1712T:mulxclang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE2021110820211108
1985522151033226 0 81056913 812 1776T:mulxgcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2021110820211108
201397009938558 0 8959121 812 1776T:mulxgcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2021110820211108
2014588831078650 0 81100252 812 1712T:amd64asmclang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE2021110820211108
202953659932877 0 8953249 812 1776T:mulxgcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2021110820211108
2031140371072762 0 81094332 812 1712T:amd64asmclang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE2021110820211108
203274532942664 0 8961482 804 1712T:amd64asmclang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE2021110820211108
2034283801072762 0 81094332 812 1712T:amd64asmclang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE2021110820211108
203465289908577 0 8928065 804 1744T:mulxgcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2021110820211108
2045576511112175 0 81132996 812 1712T:amd64asmclang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE2021110820211108
2079199451033487 0 81057169 812 1776T:amd64asmgcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2021110820211108
210770200938819 0 8959441 812 1776T:amd64asmgcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2021110820211108
212706757908838 0 8928321 804 1744T:amd64asmgcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2021110820211108
213542747933138 0 8953505 812 1776T:amd64asmgcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2021110820211108
13297476051063063 0 81084524 812 1712T:amd64clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE2021110820211108
13378080401035773 0 81057308 812 1712T:amd64clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE2021110820211108
13383912871035773 0 81057308 812 1712T:amd64clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE2021110820211108
13390400601096361 0 81117140 812 1712T:amd64clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE2021110820211108
14500235441029468 0 81053169 812 1776T:amd64gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2021110820211108
1605539565942530 0 8961354 804 1712T:amd64clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE2021110820211108
1606248274930679 0 8951289 812 1776T:amd64gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2021110820211108
1675620656926540 0 8946921 812 1776T:amd64gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2021110820211108
2541645521903106 0 8922593 804 1744T:amd64gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE2021110820211108

Test failure

Implementation: T:mulxadx
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE
error 111
Number of similar (compiler,implementation) pairs: 9, namely:
CompilerImplementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:mulxadx
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:mulxadx
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:mulxadx
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:mulxadx
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:mulxadx
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE T:mulxadx
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE T:mulxadx
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE T:mulxadx
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE T:mulxadx

Namespace violations

Implementation: T:amd64
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE
P751_compressed.o A_basis_zero R
P751_compressed.o A_gen R
P751_compressed.o Alice_order R
P751_compressed.o B_basis_zero R
P751_compressed.o B_gen R
P751_compressed.o B_gen_3_tors R
P751_compressed.o Bob_order R
P751_compressed.o CompleteMPoint T
P751_compressed.o Double T
P751_compressed.o EphemeralKeyGeneration_A_SIDHp751_Compressed T
P751_compressed.o EphemeralKeyGeneration_B_SIDHp751_Compressed T
P751_compressed.o EphemeralSecretAgreement_A_SIDHp751_Compressed T
P751_compressed.o EphemeralSecretAgreement_B_SIDHp751_Compressed T
P751_compressed.o FormatPrivKey_B T
P751_compressed.o Ladder T
P751_compressed.o Montgomery_R2 R
P751_compressed.o Montgomery_RB1 R
P751_compressed.o Montgomery_RB2 R
P751_compressed.o Montgomery_inversion_mod_order_bingcd T
P751_compressed.o Montgomery_multiply_mod_order T
P751_compressed.o Montgomery_neg T
P751_compressed.o Montgomery_one R
P751_compressed.o T_tate2_P R
P751_compressed.o T_tate2_Q R
P751_compressed.o T_tate2_firststep_P R
P751_compressed.o T_tate2_firststep_Q R
P751_compressed.o T_tate3 R
P751_compressed.o Tate2_pairings T
P751_compressed.o Tate3_pairings T
P751_compressed.o Traverse_w_div_e_fullsigned T
P751_compressed.o Traverse_w_div_e_torus T
P751_compressed.o Traverse_w_notdiv_e_fullsigned T
P751_compressed.o U3 R
P751_compressed.o XQB3 R
P751_compressed.o clear_words T
P751_compressed.o cmp_f2elm T
P751_compressed.o copy_words T
P751_compressed.o ct_cmov T
P751_compressed.o ct_compare T
P751_compressed.o cube_Fp2_cycl T
P751_compressed.o eval_3_isog T
P751_compressed.o eval_4_isog T
P751_compressed.o fp2_conj T
P751_compressed.o fp2add751 T
P751_compressed.o fp2copy751 T
P751_compressed.o fp2correction751 T
P751_compressed.o fp2div2_751 T
P751_compressed.o fp2inv751_mont T
P751_compressed.o fp2inv751_mont_bingcd T
P751_compressed.o fp2mul751_mont T
P751_compressed.o fp2neg751 T
P751_compressed.o fp2shl T
P751_compressed.o fp2sqr751_mont T
P751_compressed.o fp2sub751 T
P751_compressed.o fp2zero751 T
P751_compressed.o fpcopy751 T
P751_compressed.o fpinv751_chain_mont T
P751_compressed.o fpinv751_mont T
P751_compressed.o fpinv751_mont_bingcd T
P751_compressed.o fpmul751_mont T
P751_compressed.o fpsqr751_mont T
P751_compressed.o fpzero751 T
P751_compressed.o from_Montgomery_mod_order T
P751_compressed.o from_base T
P751_compressed.o from_fp2mont T
P751_compressed.o from_mont T
P751_compressed.o fromproj T
P751_compressed.o g_R_S_im R
P751_compressed.o get_3_isog T
P751_compressed.o get_4_isog T
P751_compressed.o get_A T
P751_compressed.o highest_2t T
P751_compressed.o highest_t T
P751_compressed.o inv_3_way T
P751_compressed.o inv_Fp2_cycl_proj T
P751_compressed.o inv_mod_orderA T
P751_compressed.o is_sqr_fp2 T
P751_compressed.o j_inv T
P751_compressed.o mod T
P751_compressed.o mod3 T
P751_compressed.o mont_n_way_inv T
P751_compressed.o mp_add T
P751_compressed.o mp_shiftl1 T
P751_compressed.o mp_shiftleft T
P751_compressed.o mp_shiftr1 T
P751_compressed.o mp_sub T
P751_compressed.o mul3 T
P751_compressed.o mulmixed_montproj T
P751_compressed.o multiply T
P751_compressed.o ord2w_dlog T
P751_compressed.o ord2w_dloghyb T
P751_compressed.o p751 R
P751_compressed.o p751p1 R
P751_compressed.o p751x16p R
P751_compressed.o p751x2 R
P751_compressed.o p751x4 R
P751_compressed.o ph2_CT R
P751_compressed.o ph2_G R
P751_compressed.o ph2_Log R
P751_compressed.o ph2_Texp R
P751_compressed.o ph2_path R
P751_compressed.o ph3_T B
P751_compressed.o ph3_T1 R
P751_compressed.o ph3_T2 R
P751_compressed.o ph3_path R
P751_compressed.o random_mod_order_A_SIDHp751 T
P751_compressed.o random_mod_order_B_SIDHp751 T
P751_compressed.o recover_os T
P751_compressed.o reverse_bits T
P751_compressed.o solve_dlog T
P751_compressed.o sqr_Fp2_cycl T
P751_compressed.o sqr_Fp2_cycl_proj T
P751_compressed.o sqrt_Fp2 T
P751_compressed.o strat_Alice R
P751_compressed.o strat_Bob R
P751_compressed.o table_r_qnr R
P751_compressed.o table_r_qr R
P751_compressed.o table_v_qnr R
P751_compressed.o table_v_qr R
P751_compressed.o threeinv R
P751_compressed.o to_Montgomery_mod_order T
P751_compressed.o to_fp2mont T
P751_compressed.o to_mont T
P751_compressed.o toproj T
P751_compressed.o u_entang R
P751_compressed.o v_3_torsion R
P751_compressed.o validate_ciphertext T
P751_compressed.o xDBL T
P751_compressed.o xDBLADD T
P751_compressed.o xDBL_e T
P751_compressed.o xDBLe T
P751_compressed.o xTPL T
P751_compressed.o xTPL_fast T
P751_compressed.o xTPLe T
P751_compressed.o xTPLe_fast T
fips202.o KeccakF1600_StatePermute T
fips202.o shake128 T
fips202.o shake128_absorb T
fips202.o shake128_squeezeblocks T
fips202.o shake256 T
fips202.o shake256_absorb T
fips202.o shake256_squeezeblocks T
fp_generic.o digit_x_digit T
fp_generic.o fpadd751 T
fp_generic.o fpcorrection751 T
fp_generic.o fpdiv2_751 T
fp_generic.o fpneg751 T
fp_generic.o fpsub751 T
fp_generic.o mp_mul T
fp_generic.o mp_sub751_p2 T
fp_generic.o mp_sub751_p4 T
fp_generic.o rdc_mont T
Number of similar (compiler,implementation) pairs: 9, namely:
CompilerImplementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:amd64
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:amd64
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:amd64
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:amd64
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:amd64
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE T:amd64
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE T:amd64
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE T:amd64
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE T:amd64

Namespace violations

Implementation: T:amd64asm
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE
P751_compressed.o A_basis_zero R
P751_compressed.o A_gen R
P751_compressed.o Alice_order R
P751_compressed.o B_basis_zero R
P751_compressed.o B_gen R
P751_compressed.o B_gen_3_tors R
P751_compressed.o Bob_order R
P751_compressed.o CompleteMPoint T
P751_compressed.o Double T
P751_compressed.o EphemeralKeyGeneration_A_SIDHp751_Compressed T
P751_compressed.o EphemeralKeyGeneration_B_SIDHp751_Compressed T
P751_compressed.o EphemeralSecretAgreement_A_SIDHp751_Compressed T
P751_compressed.o EphemeralSecretAgreement_B_SIDHp751_Compressed T
P751_compressed.o FormatPrivKey_B T
P751_compressed.o Ladder T
P751_compressed.o Montgomery_R2 R
P751_compressed.o Montgomery_RB1 R
P751_compressed.o Montgomery_RB2 R
P751_compressed.o Montgomery_inversion_mod_order_bingcd T
P751_compressed.o Montgomery_multiply_mod_order T
P751_compressed.o Montgomery_neg T
P751_compressed.o Montgomery_one R
P751_compressed.o T_tate2_P R
P751_compressed.o T_tate2_Q R
P751_compressed.o T_tate2_firststep_P R
P751_compressed.o T_tate2_firststep_Q R
P751_compressed.o T_tate3 R
P751_compressed.o Tate2_pairings T
P751_compressed.o Tate3_pairings T
P751_compressed.o Traverse_w_div_e_fullsigned T
P751_compressed.o Traverse_w_div_e_torus T
P751_compressed.o Traverse_w_notdiv_e_fullsigned T
P751_compressed.o U3 R
P751_compressed.o XQB3 R
P751_compressed.o clear_words T
P751_compressed.o cmp_f2elm T
P751_compressed.o copy_words T
P751_compressed.o ct_cmov T
P751_compressed.o ct_compare T
P751_compressed.o cube_Fp2_cycl T
P751_compressed.o eval_3_isog T
P751_compressed.o eval_4_isog T
P751_compressed.o fp2_conj T
P751_compressed.o fp2add751 T
P751_compressed.o fp2copy751 T
P751_compressed.o fp2correction751 T
P751_compressed.o fp2div2_751 T
P751_compressed.o fp2inv751_mont T
P751_compressed.o fp2inv751_mont_bingcd T
P751_compressed.o fp2mul751_mont T
P751_compressed.o fp2neg751 T
P751_compressed.o fp2shl T
P751_compressed.o fp2sqr751_mont T
P751_compressed.o fp2sub751 T
P751_compressed.o fp2zero751 T
P751_compressed.o fpcopy751 T
P751_compressed.o fpinv751_chain_mont T
P751_compressed.o fpinv751_mont T
P751_compressed.o fpinv751_mont_bingcd T
P751_compressed.o fpmul751_mont T
P751_compressed.o fpsqr751_mont T
P751_compressed.o fpzero751 T
P751_compressed.o from_Montgomery_mod_order T
P751_compressed.o from_base T
P751_compressed.o from_fp2mont T
P751_compressed.o from_mont T
P751_compressed.o fromproj T
P751_compressed.o g_R_S_im R
P751_compressed.o get_3_isog T
P751_compressed.o get_4_isog T
P751_compressed.o get_A T
P751_compressed.o highest_2t T
P751_compressed.o highest_t T
P751_compressed.o inv_3_way T
P751_compressed.o inv_Fp2_cycl_proj T
P751_compressed.o inv_mod_orderA T
P751_compressed.o is_sqr_fp2 T
P751_compressed.o j_inv T
P751_compressed.o mod T
P751_compressed.o mod3 T
P751_compressed.o mont_n_way_inv T
P751_compressed.o mp_add T
P751_compressed.o mp_shiftl1 T
P751_compressed.o mp_shiftleft T
P751_compressed.o mp_shiftr1 T
P751_compressed.o mp_sub T
P751_compressed.o mul3 T
P751_compressed.o mulmixed_montproj T
P751_compressed.o multiply T
P751_compressed.o ord2w_dlog T
P751_compressed.o ord2w_dloghyb T
P751_compressed.o p751 R
P751_compressed.o p751p1 R
P751_compressed.o p751x16p R
P751_compressed.o p751x2 R
P751_compressed.o p751x4 R
P751_compressed.o ph2_CT R
P751_compressed.o ph2_G R
P751_compressed.o ph2_Log R
P751_compressed.o ph2_Texp R
P751_compressed.o ph2_path R
P751_compressed.o ph3_T B
P751_compressed.o ph3_T1 R
P751_compressed.o ph3_T2 R
P751_compressed.o ph3_path R
P751_compressed.o random_mod_order_A_SIDHp751 T
P751_compressed.o random_mod_order_B_SIDHp751 T
P751_compressed.o recover_os T
P751_compressed.o reverse_bits T
P751_compressed.o solve_dlog T
P751_compressed.o sqr_Fp2_cycl T
P751_compressed.o sqr_Fp2_cycl_proj T
P751_compressed.o sqrt_Fp2 T
P751_compressed.o strat_Alice R
P751_compressed.o strat_Bob R
P751_compressed.o table_r_qnr R
P751_compressed.o table_r_qr R
P751_compressed.o table_v_qnr R
P751_compressed.o table_v_qr R
P751_compressed.o threeinv R
P751_compressed.o to_Montgomery_mod_order T
P751_compressed.o to_fp2mont T
P751_compressed.o to_mont T
P751_compressed.o toproj T
P751_compressed.o u_entang R
P751_compressed.o v_3_torsion R
P751_compressed.o validate_ciphertext T
P751_compressed.o xDBL T
P751_compressed.o xDBLADD T
P751_compressed.o xDBL_e T
P751_compressed.o xDBLe T
P751_compressed.o xTPL T
P751_compressed.o xTPL_fast T
P751_compressed.o xTPLe T
P751_compressed.o xTPLe_fast T
fips202.o KeccakF1600_StatePermute T
fips202.o shake128 T
fips202.o shake128_absorb T
fips202.o shake128_squeezeblocks T
fips202.o shake256 T
fips202.o shake256_absorb T
fips202.o shake256_squeezeblocks T
fp_x64.o fpadd751 T
fp_x64.o fpcorrection751 T
fp_x64.o fpdiv2_751 T
fp_x64.o fpneg751 T
fp_x64.o fpsub751 T
fp_x64.o mp_mul T
fp_x64.o mp_sub751_p2 T
fp_x64.o mp_sub751_p4 T
fp_x64.o rdc_mont T
fp_x64_asm.o fpadd751_asm T
fp_x64_asm.o fpsub751_asm T
fp_x64_asm.o mp_add751_asm T
fp_x64_asm.o mp_dblsub751x2_asm T
fp_x64_asm.o mp_sub751_p2_asm T
fp_x64_asm.o mp_sub751_p4_asm T
fp_x64_asm.o mp_subadd751x2_asm T
fp_x64_asm.o mul751_asm T
fp_x64_asm.o rdc751_asm T
Number of similar (compiler,implementation) pairs: 18, namely:
CompilerImplementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:amd64asm
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:amd64asm
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:amd64asm
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:amd64asm
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:amd64asm
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE T:amd64asm
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE T:amd64asm
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE T:amd64asm
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE T:amd64asm
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:mulx
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:mulx
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:mulx
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:mulx
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE T:mulx
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE T:mulx
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE T:mulx
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE T:mulx
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE T:mulx