Implementation notes: amd64, margaux, crypto_hash/shake256

Compiler output

keccak.s: keccak.s:1:1: error: unexpected token at start of statement
keccak.s: @
keccak.s: ^
keccak.s: keccak.s:2:1: error: unexpected token at start of statement
keccak.s: @ Implementation by the Keccak, Keyak and Ketje Teams, namely, Guido Bertoni,
keccak.s: ^
keccak.s: keccak.s:3:1: error: unexpected token at start of statement
keccak.s: @ Joan Daemen, Michaël Peeters, Gilles Van Assche and Ronny Van Keer, hereby
keccak.s: keccak.s:4:1: error: unexpected token at start of statement
keccak.s: @ denoted as "the implementer".
keccak.s: ^
keccak.s: keccak.s:5:1: error: unexpected token at start of statement
keccak.s: @
keccak.s: ^
keccak.s: keccak.s:6:1: error: unexpected token at start of statement
keccak.s: @ For more information, feedback or questions, please refer to our websites:
keccak.s: ^
keccak.s: keccak.s:7:1: error: unexpected token at start of statement
keccak.s: @ http://keccak.noekeon.org/
keccak.s: ^
keccak.s: keccak.s:8:1: error: unexpected token at start of statement
keccak.s: @ http://keyak.noekeon.org/
keccak.s: ^
keccak.s: keccak.s:9:1: error: unexpected token at start of statement
keccak.s: @ http://ketje.noekeon.org/
keccak.s: ...

Compiler output

keccak.s: keccak.s: Assembler messages:
keccak.s: keccak.s:1: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:2: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:3: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:4: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:5: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:6: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:7: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:8: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:9: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:10: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:11: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:12: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:13: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:14: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:16: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:17: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:18: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:21: Error: unknown pseudo-op: `.syntax'
keccak.s: keccak.s:22: Error: unknown pseudo-op: `.fpu'
keccak.s: keccak.s:23: Error: unknown pseudo-op: `.arm'
keccak.s: keccak.s:26: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:27: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:29: Error: junk at end of line, first unrecognized character is `@'
keccak.s: keccak.s:56: Error: junk at end of line, first unrecognized character is `@'
keccak.s: ...

Compiler output

keccak.s: keccak.s:258:20: error: unknown token in expression
keccak.s:     movi    v0.2d, #0
keccak.s:                    ^
keccak.s: keccak.s:259:20: error: unknown token in expression
keccak.s:     movi    v1.2d, #0
keccak.s:                    ^
keccak.s: keccak.s:260:20: error: unknown token in expression
keccak.s:     movi    v2.2d, #0
keccak.s:                    ^
keccak.s: keccak.s:261:20: error: unknown token in expression
keccak.s:     movi    v3.2d, #0
keccak.s:                    ^
keccak.s: keccak.s:262:15: error: unknown token in expression
keccak.s:     st4     { v0.2d, v1.2d, v2.2d, v3.2d }, [x0], #64  // Clear 8lanes=64 bytes at a time
keccak.s:               ^
keccak.s: keccak.s:263:15: error: unknown token in expression
keccak.s:     st4     { v0.2d, v1.2d, v2.2d, v3.2d }, [x0], #64
keccak.s:               ^
keccak.s: keccak.s:264:15: error: unknown token in expression
keccak.s:     st4     { v0.2d, v1.2d, v2.2d, v3.2d }, [x0], #64
keccak.s:               ^
keccak.s: keccak.s:265:15: error: unknown token in expression
keccak.s:     st1     { v0.d }[0], [x0], #8
keccak.s:               ^
keccak.s: keccak.s:276:20: error: expected ']' in brackets expression
keccak.s: ...

Compiler output

keccak.s: keccak.s: Assembler messages:
keccak.s: keccak.s:258: Error: no such instruction: `movi v0.2d,'
keccak.s: keccak.s:259: Error: no such instruction: `movi v1.2d,'
keccak.s: keccak.s:260: Error: no such instruction: `movi v2.2d,'
keccak.s: keccak.s:261: Error: no such instruction: `movi v3.2d,'
keccak.s: keccak.s:262: Error: no such instruction: `st4 { v0.2d,v1.2d,v2.2d,v3.2d },[x0],'
keccak.s: keccak.s:263: Error: no such instruction: `st4 { v0.2d,v1.2d,v2.2d,v3.2d },[x0],'
keccak.s: keccak.s:264: Error: no such instruction: `st4 { v0.2d,v1.2d,v2.2d,v3.2d },[x0],'
keccak.s: keccak.s:265: Error: no such instruction: `st1 { v0.d }[0],[x0],'
keccak.s: keccak.s:276: Error: no such instruction: `ldrb w3,[x0,x2]'
keccak.s: keccak.s:277: Error: no such instruction: `eor w3,w3,w1'
keccak.s: keccak.s:278: Error: too many memory references for `str'
keccak.s: keccak.s:289: Error: too many memory references for `add'
keccak.s: keccak.s:290: Error: too many memory references for `sub'
keccak.s: keccak.s:291: Error: no such instruction: `b.cc KeccakP1600_AddBytes_Exit//length 0,move along'
keccak.s: keccak.s:293: Error: too many memory references for `sub'
keccak.s: keccak.s:294: Error: no such instruction: `b.cc KeccakP1600_AddBytes_Lanes//Jump if length is negative'
keccak.s: keccak.s:295: Error: no such instruction: `ld4 { v0.2d,v1.2d,v2.2d,v3.2d },[x0]'
keccak.s: keccak.s:296: Error: no such instruction: `ld4 { v4.2d,v5.2d,v6.2d,v7.2d },[x1],'
keccak.s: keccak.s:297: Error: no such instruction: `eor v0.16b,v0.16b,v4.16b'
keccak.s: keccak.s:298: Error: no such instruction: `eor v1.16b,v1.16b,v5.16b'
keccak.s: keccak.s:299: Error: no such instruction: `eor v2.16b,v2.16b,v6.16b'
keccak.s: keccak.s:300: Error: no such instruction: `eor v3.16b,v3.16b,v7.16b'
keccak.s: keccak.s:301: Error: no such instruction: `st4 { v0.2d,v1.2d,v2.2d,v3.2d },[x0],'
keccak.s: keccak.s:302: Error: no such instruction: `b KeccakP1600_AddBytes_8LanesLoop'
keccak.s: ...

Compiler output

KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:28:17: warning: unknown pragma ignored [-Wunknown-pragmas]
KeccakP-1600-AVX2.c:     #pragma GCC optimize("2")
KeccakP-1600-AVX2.c:                 ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:506:13: error: always_inline function '_mm256_loadu_si256' requires target feature 'avx', but would be inlined into function 'crypto_hash_shake256_kcp_optimized1600AVX2_constbranchindex_KeccakP1600_AddBytes' that is compiled without support for 'avx'
KeccakP-1600-AVX2.c:     s->a0 = LOAD(t + 0*5);
KeccakP-1600-AVX2.c:             ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:62:41: note: expanded from macro 'LOAD'
KeccakP-1600-AVX2.c: #define LOAD(p)                         _mm256_loadu_si256((const __m256i *)(p))
KeccakP-1600-AVX2.c:                                         ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:506:13: error: AVX vector return of type '__m256i' (vector of 4 'long long' values) without 'avx' enabled changes the ABI
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:62:41: note: expanded from macro 'LOAD'
KeccakP-1600-AVX2.c: #define LOAD(p)                         _mm256_loadu_si256((const __m256i *)(p))
KeccakP-1600-AVX2.c:                                         ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:507:13: error: always_inline function '_mm256_loadu_si256' requires target feature 'avx', but would be inlined into function 'crypto_hash_shake256_kcp_optimized1600AVX2_constbranchindex_KeccakP1600_AddBytes' that is compiled without support for 'avx'
KeccakP-1600-AVX2.c:     s->a1 = LOAD(t + 1*5);
KeccakP-1600-AVX2.c:             ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:62:41: note: expanded from macro 'LOAD'
KeccakP-1600-AVX2.c: #define LOAD(p)                         _mm256_loadu_si256((const __m256i *)(p))
KeccakP-1600-AVX2.c:                                         ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:507:13: error: AVX vector return of type '__m256i' (vector of 4 'long long' values) without 'avx' enabled changes the ABI
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:62:41: note: expanded from macro 'LOAD'
KeccakP-1600-AVX2.c: #define LOAD(p)                         _mm256_loadu_si256((const __m256i *)(p))
KeccakP-1600-AVX2.c:                                         ^
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:508:13: error: always_inline function '_mm256_loadu_si256' requires target feature 'avx', but would be inlined into function 'crypto_hash_shake256_kcp_optimized1600AVX2_constbranchindex_KeccakP1600_AddBytes' that is compiled without support for 'avx'
KeccakP-1600-AVX2.c:     s->a2 = LOAD(t + 2*5);
KeccakP-1600-AVX2.c: ...

Compiler output

KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c: In function 'crypto_hash_shake256_kcp_optimized1600AVX2_constbranchindex_KeccakP1600_Permute_Nrounds':
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:86:17: warning: unused variable 'SRLV_C4' [-Wunused-variable]
KeccakP-1600-AVX2.c:    86 |     _ROLV_TYPE  SRLV##name = SET(64 - i0, 64 - i1, 64 - i2, 64 - i3);
KeccakP-1600-AVX2.c:       |                 ^~~~
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:100:1: note: in expansion of macro '_ROLV_CONST'
KeccakP-1600-AVX2.c:   100 | _ROLV_CONST(_C4, 27, 20, 39,  8)
KeccakP-1600-AVX2.c:       | ^~~~~~~~~~~
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:637:5: note: in expansion of macro 'KECCAK_CONSTANTS'
KeccakP-1600-AVX2.c:   637 |     KECCAK_CONSTANTS
KeccakP-1600-AVX2.c:       |     ^~~~~~~~~~~~~~~~
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:85:17: warning: unused variable 'SLLV_C4' [-Wunused-variable]
KeccakP-1600-AVX2.c:    85 |     _ROLV_TYPE  SLLV##name = SET(i0, i1, i2, i3); \
KeccakP-1600-AVX2.c:       |                 ^~~~
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:100:1: note: in expansion of macro '_ROLV_CONST'
KeccakP-1600-AVX2.c:   100 | _ROLV_CONST(_C4, 27, 20, 39,  8)
KeccakP-1600-AVX2.c:       | ^~~~~~~~~~~
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:637:5: note: in expansion of macro 'KECCAK_CONSTANTS'
KeccakP-1600-AVX2.c:   637 |     KECCAK_CONSTANTS
KeccakP-1600-AVX2.c:       |     ^~~~~~~~~~~~~~~~
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:86:17: warning: unused variable 'SRLV_A4' [-Wunused-variable]
KeccakP-1600-AVX2.c:    86 |     _ROLV_TYPE  SRLV##name = SET(64 - i0, 64 - i1, 64 - i2, 64 - i3);
KeccakP-1600-AVX2.c:       |                 ^~~~
KeccakP-1600-AVX2.c: KeccakP-1600-AVX2.c:99:1: note: in expansion of macro '_ROLV_CONST'
KeccakP-1600-AVX2.c:    99 | _ROLV_CONST(_A4, 18,  2, 61, 56) \
KeccakP-1600-AVX2.c:       | ^~~~~~~~~~~
KeccakP-1600-AVX2.c: ...

Compiler output

KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:238:41: error: always_inline function '_mm512_maskz_loadu_epi64' requires target feature 'avx512f', but would be inlined into function 'KeccakP1600_AddBytes' that is compiled without support for 'avx512f'
KeccakP-1600-AVX512.c:         STORE_8Lanes( stateAsLanes, XOR(LOAD_8Lanes(stateAsLanes), LOAD_8Lanes((const UINT64*)data)));
KeccakP-1600-AVX512.c:                                         ^
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:215:37: note: expanded from macro 'LOAD_8Lanes'
KeccakP-1600-AVX512.c: #define LOAD_8Lanes(a)              LOAD_Lanes(0xFF,a)
KeccakP-1600-AVX512.c:                                     ^
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:212:37: note: expanded from macro 'LOAD_Lanes'
KeccakP-1600-AVX512.c: #define LOAD_Lanes(m,a)             _mm512_maskz_loadu_epi64(m,a)
KeccakP-1600-AVX512.c:                                     ^
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:238:41: error: AVX vector return of type '__m512i' (vector of 8 'long long' values) without 'avx512f' enabled changes the ABI
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:215:37: note: expanded from macro 'LOAD_8Lanes'
KeccakP-1600-AVX512.c: #define LOAD_8Lanes(a)              LOAD_Lanes(0xFF,a)
KeccakP-1600-AVX512.c:                                     ^
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:212:37: note: expanded from macro 'LOAD_Lanes'
KeccakP-1600-AVX512.c: #define LOAD_Lanes(m,a)             _mm512_maskz_loadu_epi64(m,a)
KeccakP-1600-AVX512.c:                                     ^
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:238:68: error: always_inline function '_mm512_maskz_loadu_epi64' requires target feature 'avx512f', but would be inlined into function 'KeccakP1600_AddBytes' that is compiled without support for 'avx512f'
KeccakP-1600-AVX512.c:         STORE_8Lanes( stateAsLanes, XOR(LOAD_8Lanes(stateAsLanes), LOAD_8Lanes((const UINT64*)data)));
KeccakP-1600-AVX512.c:                                                                    ^
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:215:37: note: expanded from macro 'LOAD_8Lanes'
KeccakP-1600-AVX512.c: #define LOAD_8Lanes(a)              LOAD_Lanes(0xFF,a)
KeccakP-1600-AVX512.c:                                     ^
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:212:37: note: expanded from macro 'LOAD_Lanes'
KeccakP-1600-AVX512.c: #define LOAD_Lanes(m,a)             _mm512_maskz_loadu_epi64(m,a)
KeccakP-1600-AVX512.c:                                     ^
KeccakP-1600-AVX512.c: ...

Compiler output

KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c: In function 'KeccakP1600_Permute_12rounds':
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:523:18: warning: unused variable 'i' [-Wunused-variable]
KeccakP-1600-AVX512.c:   523 |     unsigned int i;
KeccakP-1600-AVX512.c:       |                  ^
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c: In function 'KeccakP1600_AddBytes':
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:216:37: warning: AVX512F vector return without AVX512F enabled changes the ABI [-Wpsabi]
KeccakP-1600-AVX512.c:   216 | #define STORE_Lanes(a,m,v)          _mm512_mask_storeu_epi64(a,m,v)
KeccakP-1600-AVX512.c:       |                                     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:219:37: note: in expansion of macro 'STORE_Lanes'
KeccakP-1600-AVX512.c:   219 | #define STORE_8Lanes(a,v)           STORE_Lanes(a,0xFF,v)
KeccakP-1600-AVX512.c:       |                                     ^~~~~~~~~~~
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:238:9: note: in expansion of macro 'STORE_8Lanes'
KeccakP-1600-AVX512.c:   238 |         STORE_8Lanes( stateAsLanes, XOR(LOAD_8Lanes(stateAsLanes), LOAD_8Lanes((const UINT64*)data)));
KeccakP-1600-AVX512.c:       |         ^~~~~~~~~~~~
KeccakP-1600-AVX512.c: In file included from /usr/lib/gcc/x86_64-linux-gnu/11/include/immintrin.h:49,
KeccakP-1600-AVX512.c:                  from KeccakP-1600-AVX512.c:26:
KeccakP-1600-AVX512.c: /usr/lib/gcc/x86_64-linux-gnu/11/include/avx512fintrin.h:6440:1: error: inlining failed in call to 'always_inline' '_mm512_mask_storeu_epi64': target specific option mismatch
KeccakP-1600-AVX512.c:  6440 | _mm512_mask_storeu_epi64 (void *__P, __mmask8 __U, __m512i __A)
KeccakP-1600-AVX512.c:       | ^~~~~~~~~~~~~~~~~~~~~~~~
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:216:37: note: called from here
KeccakP-1600-AVX512.c:   216 | #define STORE_Lanes(a,m,v)          _mm512_mask_storeu_epi64(a,m,v)
KeccakP-1600-AVX512.c:       |                                     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
KeccakP-1600-AVX512.c: KeccakP-1600-AVX512.c:219:37: note: in expansion of macro 'STORE_Lanes'
KeccakP-1600-AVX512.c:   219 | #define STORE_8Lanes(a,v)           STORE_Lanes(a,0xFF,v)
KeccakP-1600-AVX512.c:       |                                     ^~~~~~~~~~~
KeccakP-1600-AVX512.c: ...

Passed TIMECOP

TIMECOP iterations: 10