Implementation notes: amd64, hydra8, crypto_kem/ledakemcpa32

Computer: hydra8
Microarchitecture: amd64; Ivy Bridge+AES (306a9)
Architecture: amd64
CPU ID: GenuineIntel-000306a9-bfebfbff
SUPERCOP version: 20240716
Operation: crypto_kem
Primitive: ledakemcpa32
TimeObject sizeTest sizeImplementationCompilerBenchmark dateSUPERCOP version
665684948879 60 52142101 956 1760T:portableoptclang_-mcpu=native_-O3_-fwrapv_-Qunused-arguments_-fPIC_-fPIE_-gdwarf-4_-Wall2024072020240716

Compiler output

gf2x_arith.c: gf2x_arith.c:803:17: error: always_inline function '_mm256_xor_si256' requires target feature 'avx2', but would be inlined into function 'gf2x_exact_div_x_plus_one' that is compiled without support for 'avx2'
gf2x_arith.c:         vec_t = _mm256_xor_si256(tmp,vec_t);
gf2x_arith.c:                 ^
gf2x_arith.c: gf2x_arith.c:806:15: error: always_inline function '_mm256_slli_epi64' requires target feature 'avx2', but would be inlined into function 'gf2x_exact_div_x_plus_one' that is compiled without support for 'avx2'
gf2x_arith.c:         tmp = _mm256_slli_epi64(vec_t, j);
gf2x_arith.c:               ^
gf2x_arith.c: gf2x_arith.c:807:21: error: always_inline function '_mm256_xor_si256' requires target feature 'avx2', but would be inlined into function 'gf2x_exact_div_x_plus_one' that is compiled without support for 'avx2'
gf2x_arith.c:             vec_t = _mm256_xor_si256(tmp,vec_t);
gf2x_arith.c:                     ^
gf2x_arith.c: gf2x_arith.c:818:17: error: always_inline function '_mm256_xor_si256' requires target feature 'avx2', but would be inlined into function 'gf2x_exact_div_x_plus_one' that is compiled without support for 'avx2'
gf2x_arith.c:         vec_t = _mm256_xor_si256(tmp,vec_t);
gf2x_arith.c:                 ^
gf2x_arith.c: gf2x_arith.c:824:17: error: always_inline function '_mm256_xor_si256' requires target feature 'avx2', but would be inlined into function 'gf2x_exact_div_x_plus_one' that is compiled without support for 'avx2'
gf2x_arith.c:         vec_t = _mm256_xor_si256(tmp,vec_t);
gf2x_arith.c:                 ^
gf2x_arith.c: 5 errors generated.
Number of similar (implementation,compiler) pairs: 4, namely:
ImplementationCompiler
T:portableoptclang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)
T:portableoptclang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)
T:portableoptclang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)
T:portableoptclang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)

Compiler output

gf2x_arith.c: In file included from /usr/lib/gcc/x86_64-linux-gnu/11/include/immintrin.h:47,
gf2x_arith.c:                  from /usr/lib/gcc/x86_64-linux-gnu/11/include/x86intrin.h:32,
gf2x_arith.c:                  from architecture_detect.h:41,
gf2x_arith.c:                  from gf2x_arith.h:34,
gf2x_arith.c:                  from gf2x_arith.c:31:
gf2x_arith.c: gf2x_arith.c: In function 'gf2x_exact_div_x_plus_one':
gf2x_arith.c: /usr/lib/gcc/x86_64-linux-gnu/11/include/avx2intrin.h:913:1: error: inlining failed in call to 'always_inline' '_mm256_xor_si256': target specific option mismatch
gf2x_arith.c:   913 | _mm256_xor_si256 (__m256i __A, __m256i __B)
gf2x_arith.c:       | ^~~~~~~~~~~~~~~~
gf2x_arith.c: gf2x_arith.c:803:17: note: called from here
gf2x_arith.c:   803 |         vec_t = _mm256_xor_si256(tmp,vec_t);
gf2x_arith.c:       |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~
gf2x_arith.c: In file included from /usr/lib/gcc/x86_64-linux-gnu/11/include/immintrin.h:47,
gf2x_arith.c:                  from /usr/lib/gcc/x86_64-linux-gnu/11/include/x86intrin.h:32,
gf2x_arith.c:                  from architecture_detect.h:41,
gf2x_arith.c:                  from gf2x_arith.h:34,
gf2x_arith.c:                  from gf2x_arith.c:31:
gf2x_arith.c: /usr/lib/gcc/x86_64-linux-gnu/11/include/avx2intrin.h:913:1: error: inlining failed in call to 'always_inline' '_mm256_xor_si256': target specific option mismatch
gf2x_arith.c:   913 | _mm256_xor_si256 (__m256i __A, __m256i __B)
gf2x_arith.c:       | ^~~~~~~~~~~~~~~~
gf2x_arith.c: gf2x_arith.c:803:17: note: called from here
gf2x_arith.c:   803 |         vec_t = _mm256_xor_si256(tmp,vec_t);
gf2x_arith.c:       |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~
gf2x_arith.c: In file included from /usr/lib/gcc/x86_64-linux-gnu/11/include/immintrin.h:47,
gf2x_arith.c:                  from /usr/lib/gcc/x86_64-linux-gnu/11/include/x86intrin.h:32,
gf2x_arith.c: ...
Number of similar (implementation,compiler) pairs: 4, namely:
ImplementationCompiler
T:portableoptgcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)
T:portableoptgcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)
T:portableoptgcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)
T:portableoptgcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (11.4.0)

Namespace violations

H_Q_matrices_generation.o generateHPosOnes T
H_Q_matrices_generation.o transposeHPosOnes T
aes256.o rijndaelEncrypt T
aes256.o rijndaelKeySetupEnc T
bf_decoding.o bf_decoding_CT T
bf_decoding.o lift_mul_dense_to_sparse_CT T
djbsort.o int32_sort T
gf2x_arith.o gf2x_mul_Kar T
gf2x_arith.o gf2x_mul_TC3 T
gf2x_arith.o gf2x_mul_comb T
gf2x_arith_mod_xPplusOne.o gf2x_digit_times_poly_mul T
gf2x_arith_mod_xPplusOne.o gf2x_mod_fmac T
gf2x_arith_mod_xPplusOne.o gf2x_mod_inverse_KTT T
gf2x_arith_mod_xPplusOne.o gf2x_mod_mul T
gf2x_arith_mod_xPplusOne.o gf2x_mod_mul_dense_to_sparse T
gf2x_arith_mod_xPplusOne.o gf2x_mod_mul_monom T
gf2x_arith_mod_xPplusOne.o gf2x_transpose_in_place T
gf2x_arith_mod_xPplusOne.o rand_circulant_sparse_block T
gf2x_arith_mod_xPplusOne.o rand_error_pos T
gf2x_arith_mod_xPplusOne.o rand_error_pos_shake T
inverse_exp.o gf2x_mod_inverse_exp T
inverse_exp.o inverse_factors_table D
inverse_exp.o pow_2_A T
inverse_exp.o raise_2_i_clmul T
inverse_exp.o raise_2_i_factor_inverse_permute T
inverse_exp.o raise_2_i_hybrid T
niederreiter_decrypt.o decrypt_niederreiter_indcpa T
niederreiter_encrypt.o encrypt_niederreiter_indcpa T
niederreiter_keygen.o key_gen_niederreiter T
niederreiter_keygen.o privateKey_deletion_niederreiter T
niederreiter_keygen.o publicKey_deletion_niederreiter T
rng.o AES256_CTR_DRBG_Update T
rng.o AES256_ECB T
rng.o DRBG_ctx B
rng.o deterministic_random_byte_generator T
rng.o rand_range T
rng.o rand_range_shake T
rng.o seedexpander T
rng.o seedexpander_from_trng T
rng.o seedexpander_init T
rng.o shake_seedexpander_extract T
rng.o shake_seedexpander_init T
Number of similar (implementation,compiler) pairs: 1, namely:
ImplementationCompiler
T:portableoptclang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Ubuntu_Clang_14.0.0)