Implementation notes: amd64, hydra8, crypto_kem/sikep751

Computer: hydra8
Microarchitecture: amd64; IB+AES (306a9)
Architecture: amd64
CPU ID: GenuineIntel-000306a9-bfebfbff
SUPERCOP version: 20221122
Operation: crypto_kem
Primitive: sikep751

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
165096571	105841 0 0	127115 828 1712	`T:amd64asm`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20211108	20211108
165157668	105822 0 0	125555 828 1712	`T:amd64asm`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20211108	20211108
165161574	105822 0 0	125555 828 1712	`T:amd64asm`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20211108	20211108
165400451	47703 0 0	64121 820 1712	`T:amd64asm`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20211108	20211108
165702256	118514 0 0	136867 828 1712	`T:amd64asm`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20211108	20211108
168276073	80313 0 0	100321 812 1744	`T:amd64asm`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20211108	20211108
169464126	37956 0 0	55721 812 1744	`T:amd64asm`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20211108	20211108
170779667	36264 0 0	53817 812 1744	`T:amd64asm`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20211108	20211108
171243272	31824 0 0	48425 804 1712	`T:amd64asm`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20211108	20211108
1200583939	120452 0 0	138851 828 1712	`T:amd64`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20211108	20211108
1201528003	107795 0 0	129083 828 1712	`T:amd64`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20211108	20211108
1204551651	99120 0 0	118923 828 1712	`T:amd64`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20211108	20211108
1204596453	99120 0 0	118923 828 1712	`T:amd64`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20211108	20211108
1289573669	140048 0 0	160033 812 1744	`T:amd64`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20211108	20211108
1417872856	47860 0 0	64289 820 1712	`T:amd64`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20211108	20211108
1467774859	38286 0 0	56057 812 1744	`T:amd64`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20211108	20211108
1512456126	36873 0 0	54425 812 1744	`T:amd64`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20211108	20211108
2206523824	26012 0 0	42641 804 1712	`T:amd64`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20211108	20211108
14127042979	48509 1088 0	303454 2020 1744	`T:ref`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20211108	20211108
14131151930	34963 1088 0	286764 2012 1744	`T:ref`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20211108	20211108
14133376537	48509 1088 0	303454 2020 1744	`T:ref`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20211108	20211108
14150298518	35915 1136 0	280536 2036 1744	`T:ref`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20211108	20211108
14158914424	43309 1088 0	298222 2020 1744	`T:ref`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20211108	20211108
14159997097	71315 1136 0	319408 2044 1776	`T:ref`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20211108	20211108
14160457407	39026 1136 0	284896 2044 1776	`T:ref`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20211108	20211108
14184140377	52761 1088 0	309278 2020 1744	`T:ref`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20211108	20211108
14265163860	39125 1136 0	284768 2044 1776	`T:ref`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20211108	20211108

Test failure

Implementation: T:mulx
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

error 111

Number of similar (compiler,implementation) pairs: 18, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:mulx
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:mulx
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:mulx
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:mulx
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:mulx
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:mulx
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:mulx
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:mulx
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:mulx
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:mulxadx
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:mulxadx
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:mulxadx
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:mulxadx
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:mulxadx
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:mulxadx
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:mulxadx
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:mulxadx
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:mulxadx

Namespace violations

Implementation: T:amd64
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

P751.o A_gen R
P751.o Alice_order R
P751.o B_gen R
P751.o Bob_order R
P751.o EphemeralKeyGeneration_A_SIDHp751 T
P751.o EphemeralKeyGeneration_B_SIDHp751 T
P751.o EphemeralSecretAgreement_A_SIDHp751 T
P751.o EphemeralSecretAgreement_B_SIDHp751 T
P751.o Montgomery_R2 R
P751.o Montgomery_one R
P751.o clear_words T
P751.o copy_words T
P751.o ct_cmov T
P751.o ct_compare T
P751.o eval_3_isog T
P751.o eval_4_isog T
P751.o fp2add751 T
P751.o fp2copy751 T
P751.o fp2correction751 T
P751.o fp2div2_751 T
P751.o fp2inv751_mont T
P751.o fp2mul751_mont T
P751.o fp2neg751 T
P751.o fp2sqr751_mont T
P751.o fp2sub751 T
P751.o fp2zero751 T
P751.o fpcopy751 T
P751.o fpinv751_chain_mont T
P751.o fpinv751_mont T
P751.o fpmul751_mont T
P751.o fpsqr751_mont T
P751.o fpzero751 T
P751.o from_fp2mont T
P751.o from_mont T
P751.o get_3_isog T
P751.o get_4_isog T
P751.o get_A T
P751.o inv_3_way T
P751.o j_inv T
P751.o mp_add T
P751.o mp_shiftl1 T
P751.o mp_shiftleft T
P751.o mp_shiftr1 T
P751.o mp_sub T
P751.o p751 R
P751.o p751p1 R
P751.o p751x16p R
P751.o p751x2 R
P751.o p751x4 R
P751.o random_mod_order_A_SIDHp751 T
P751.o random_mod_order_B_SIDHp751 T
P751.o strat_Alice R
P751.o strat_Bob R
P751.o to_fp2mont T
P751.o to_mont T
P751.o xDBL T
P751.o xDBLADD T
P751.o xDBLe T
P751.o xTPL T
P751.o xTPLe T
fips202.o KeccakF1600_StatePermute T
fips202.o shake128 T
fips202.o shake128_absorb T
fips202.o shake128_squeezeblocks T
fips202.o shake256 T
fips202.o shake256_absorb T
fips202.o shake256_squeezeblocks T
fp_generic.o digit_x_digit T
fp_generic.o fpadd751 T
fp_generic.o fpcorrection751 T
fp_generic.o fpdiv2_751 T
fp_generic.o fpneg751 T
fp_generic.o fpsub751 T
fp_generic.o mp_mul T
fp_generic.o mp_sub751_p2 T
fp_generic.o mp_sub751_p4 T
fp_generic.o rdc_mont T

Number of similar (compiler,implementation) pairs: 9, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:amd64
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:amd64
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:amd64
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:amd64
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:amd64
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:amd64
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:amd64
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:amd64
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:amd64

Namespace violations

Implementation: T:amd64asm
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

P751.o A_gen R
P751.o Alice_order R
P751.o B_gen R
P751.o Bob_order R
P751.o EphemeralKeyGeneration_A_SIDHp751 T
P751.o EphemeralKeyGeneration_B_SIDHp751 T
P751.o EphemeralSecretAgreement_A_SIDHp751 T
P751.o EphemeralSecretAgreement_B_SIDHp751 T
P751.o Montgomery_R2 R
P751.o Montgomery_one R
P751.o clear_words T
P751.o copy_words T
P751.o ct_cmov T
P751.o ct_compare T
P751.o eval_3_isog T
P751.o eval_4_isog T
P751.o fp2add751 T
P751.o fp2copy751 T
P751.o fp2correction751 T
P751.o fp2div2_751 T
P751.o fp2inv751_mont T
P751.o fp2mul751_mont T
P751.o fp2neg751 T
P751.o fp2sqr751_mont T
P751.o fp2sub751 T
P751.o fp2zero751 T
P751.o fpcopy751 T
P751.o fpinv751_chain_mont T
P751.o fpinv751_mont T
P751.o fpmul751_mont T
P751.o fpsqr751_mont T
P751.o fpzero751 T
P751.o from_fp2mont T
P751.o from_mont T
P751.o get_3_isog T
P751.o get_4_isog T
P751.o get_A T
P751.o inv_3_way T
P751.o j_inv T
P751.o mp_add T
P751.o mp_shiftl1 T
P751.o mp_shiftleft T
P751.o mp_shiftr1 T
P751.o mp_sub T
P751.o p751 R
P751.o p751p1 R
P751.o p751x16p R
P751.o p751x2 R
P751.o p751x4 R
P751.o random_mod_order_A_SIDHp751 T
P751.o random_mod_order_B_SIDHp751 T
P751.o strat_Alice R
P751.o strat_Bob R
P751.o to_fp2mont T
P751.o to_mont T
P751.o xDBL T
P751.o xDBLADD T
P751.o xDBLe T
P751.o xTPL T
P751.o xTPLe T
fips202.o KeccakF1600_StatePermute T
fips202.o shake128 T
fips202.o shake128_absorb T
fips202.o shake128_squeezeblocks T
fips202.o shake256 T
fips202.o shake256_absorb T
fips202.o shake256_squeezeblocks T
fp_x64.o fpadd751 T
fp_x64.o fpcorrection751 T
fp_x64.o fpdiv2_751 T
fp_x64.o fpneg751 T
fp_x64.o fpsub751 T
fp_x64.o mp_mul T
fp_x64.o mp_sub751_p2 T
fp_x64.o mp_sub751_p4 T
fp_x64.o rdc_mont T
fp_x64_asm.o fpadd751_asm T
fp_x64_asm.o fpsub751_asm T
fp_x64_asm.o mp_add751_asm T
fp_x64_asm.o mp_dblsub751x2_asm T
fp_x64_asm.o mp_sub751_p2_asm T
fp_x64_asm.o mp_sub751_p4_asm T
fp_x64_asm.o mp_subadd751x2_asm T
fp_x64_asm.o mul751_asm T
fp_x64_asm.o rdc751_asm T

Number of similar (compiler,implementation) pairs: 9, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:amd64asm
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:amd64asm
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:amd64asm
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:amd64asm
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:amd64asm
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:amd64asm
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:amd64asm
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:amd64asm
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:amd64asm

Namespace violations

Implementation: T:ref
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

api_generic.o crypto_kem_dec_generic T
api_generic.o crypto_kem_enc_generic T
api_generic.o crypto_kem_keypair_generic T
encoding.o clear_free T
encoding.o encapstoos T
encoding.o encapstoos_alloc T
encoding.o encapstoos_len T
encoding.o fp2toos T
encoding.o fp2toos_alloc T
encoding.o fp2toos_len T
encoding.o ostoencaps T
encoding.o ostofp T
encoding.o ostofp2 T
encoding.o ostoi T
encoding.o ostopk T
encoding.o ostosk T
encoding.o pktoos T
encoding.o pktoos_alloc T
encoding.o pktoos_len T
encoding.o sktoos T
encoding.o sktoos_len T
fips202.o KeccakF1600_StatePermute T
fips202.o cshake128_simple T
fips202.o cshake128_simple_absorb T
fips202.o cshake128_simple_squeezeblocks T
fips202.o cshake256_simple T
fips202.o cshake256_simple_absorb T
fips202.o cshake256_simple_squeezeblocks T
fips202.o shake128 T
fips202.o shake128_absorb T
fips202.o shake128_squeezeblocks T
fips202.o shake256 T
fips202.o shake256_absorb T
fips202.o shake256_squeezeblocks T
fp.o fp_Add T
fp.o fp_Clear T
fp.o fp_Constant T
fp.o fp_Copy T
fp.o fp_ImportHex T
fp.o fp_Init T
fp.o fp_Invert T
fp.o fp_IsBitSet T
fp.o fp_IsConstant T
fp.o fp_IsEqual T
fp.o fp_Multiply T
fp.o fp_Negative T
fp.o fp_Pow T
fp.o fp_Rand T
fp.o fp_Square T
fp.o fp_Subtract T
fp.o fp_Unity T
fp.o fp_Zero T
fp.o mp_export T
fp.o mp_import T
fp.o mp_mod T
fp.o mp_pow T
fp.o mp_sizeinbase T
fp.o set_gmp_fp_params T
fp2.o fp2_Add T
fp2.o fp2_AddDeg1 T
fp2.o fp2_Clear T
fp2.o fp2_Copy T
fp2.o fp2_Init T
fp2.o fp2_Init_set T
fp2.o fp2_Invert T
fp2.o fp2_IsConst T
fp2.o fp2_IsEqual T
fp2.o fp2_Multiply T
fp2.o fp2_Negative T
fp2.o fp2_Rand T
fp2.o fp2_Set T
fp2.o fp2_Sqrt T
fp2.o fp2_Square T
fp2.o fp2_Sub T
isogeny.o curve_2_iso T
isogeny.o curve_3_iso T
isogeny.o curve_4_iso T
isogeny.o eval_2_iso T
isogeny.o eval_3_iso T
isogeny.o eval_4_iso T
isogeny.o iso_2_e T
isogeny.o iso_3_e T
montgomery.o get_xR T
montgomery.o get_yP_yQ_A_B T
montgomery.o j_inv T
montgomery.o mont_curve_clear T
montgomery.o mont_curve_copy T
montgomery.o mont_curve_init T
montgomery.o mont_double_and_add T
montgomery.o mont_pt_clear T
montgomery.o mont_pt_copy T
montgomery.o mont_pt_init T
montgomery.o public_key_clear T
montgomery.o public_key_init T
montgomery.o xADD T
montgomery.o xDBL T
montgomery.o xDBLe T
montgomery.o xTPL T
montgomery.o xTPLe T
sidh.o sidh_isoex T
sidh.o sidh_isogen T
sidh.o sidh_sk_keygen T
sike.o sike_kem_decaps T
sike.o sike_kem_encaps T
sike.o sike_kem_keygen T
sike.o sike_pke_dec T
sike.o sike_pke_enc T
sike_params.o SIKEp434 D
sike_params.o SIKEp503 D
sike_params.o SIKEp610 D
sike_params.o SIKEp751 D
sike_params.o sike_setup_params T
sike_params.o sike_teardown_params T

Number of similar (compiler,implementation) pairs: 9, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref