Implementation notes: amd64, nucnuc, crypto_kem/frodokem1344aes

Computer: nucnuc
Microarchitecture: amd64; Airmont (406c3)
Architecture: amd64
CPU ID: GenuineIntel-000406c3-bfebfbff
SUPERCOP version: 20230530
Operation: crypto_kem
Primitive: frodokem1344aes

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
54656265	39939 22 0	59563 884 1752	`T:optimized`	`gcc_-march=native_-mtune=native_-O3_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221019	20221005
55048200	22232 16 0	42294 892 1720	`T:optimized`	`clang_-mcpu=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221019	20221005
57574222	24352 16 0	43206 892 1720	`T:optimized`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221019	20221005
57863188	18747 16 0	39286 892 1720	`T:optimized`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221019	20221005
66803384	9588 16 0	26908 884 1720	`T:optimized`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221019	20221005
139856742	9899 16 0	27772 884 1720	`T:optimized`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221019	20221005
168328866	10632 22 0	29155 884 1752	`T:optimized`	`gcc_-march=native_-mtune=native_-O2_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221019	20221005
196748678	8722 22 0	25627 876 1720	`T:optimized`	`gcc_-march=native_-mtune=native_-Os_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221019	20221005
301375419	9731 22 0	27763 884 1752	`T:optimized`	`gcc_-march=native_-mtune=native_-O_-fomit-frame-pointer_-fwrapv_-fPIC_-fPIE`	20221019	20221005

Compiler output

Implementation: T:x64
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

frodo1344.c: In file included from frodo1344.c:33:
frodo1344.c: ./frodo_macrify.inc:105:26: error: always_inline function '_mm256_setzero_si256' requires target feature 'avx', but would be inlined into function 'frodo_mul_add_sa_plus_e' that is compiled without support for 'avx'
frodo1344.c: acc[0] = _mm256_setzero_si256();
frodo1344.c: ^
frodo1344.c: ./frodo_macrify.inc:105:26: error: AVX vector return of type '__m256i' (vector of 4 'long long' values) without 'avx' enabled changes the ABI
frodo1344.c: ./frodo_macrify.inc:106:26: error: always_inline function '_mm256_setzero_si256' requires target feature 'avx', but would be inlined into function 'frodo_mul_add_sa_plus_e' that is compiled without support for 'avx'
frodo1344.c: acc[1] = _mm256_setzero_si256();
frodo1344.c: ^
frodo1344.c: ./frodo_macrify.inc:106:26: error: AVX vector return of type '__m256i' (vector of 4 'long long' values) without 'avx' enabled changes the ABI
frodo1344.c: ./frodo_macrify.inc:107:26: error: always_inline function '_mm256_setzero_si256' requires target feature 'avx', but would be inlined into function 'frodo_mul_add_sa_plus_e' that is compiled without support for 'avx'
frodo1344.c: acc[2] = _mm256_setzero_si256();
frodo1344.c: ^
frodo1344.c: ./frodo_macrify.inc:107:26: error: AVX vector return of type '__m256i' (vector of 4 'long long' values) without 'avx' enabled changes the ABI
frodo1344.c: ./frodo_macrify.inc:108:26: error: always_inline function '_mm256_setzero_si256' requires target feature 'avx', but would be inlined into function 'frodo_mul_add_sa_plus_e' that is compiled without support for 'avx'
frodo1344.c: acc[3] = _mm256_setzero_si256();
frodo1344.c: ^
frodo1344.c: ./frodo_macrify.inc:108:26: error: AVX vector return of type '__m256i' (vector of 4 'long long' values) without 'avx' enabled changes the ABI
frodo1344.c: ./frodo_macrify.inc:110:25: error: always_inline function '_mm256_load_si256' requires target feature 'avx', but would be inlined into function 'frodo_mul_add_sa_plus_e' that is compiled without support for 'avx'
frodo1344.c: b = _mm256_load_si256((__m256i*)&s[i*PARAMS_N + j]);
frodo1344.c: ^
frodo1344.c: ./frodo_macrify.inc:110:25: error: AVX vector return of type '__m256i' (vector of 4 'long long' values) without 'avx' enabled changes the ABI
frodo1344.c: ./frodo_macrify.inc:111:28: error: always_inline function '_mm256_load_si256' requires target feature 'avx', but would be inlined into function 'frodo_mul_add_sa_plus_e' that is compiled without support for 'avx'
frodo1344.c: a[0] = _mm256_load_si256((__m256i*)&a_cols_t[(k+0)*PARAMS_N + j]);
frodo1344.c: ^
frodo1344.c: ./frodo_macrify.inc:111:28: error: AVX vector return of type '__m256i' (vector of 4 'long long' values) without 'avx' enabled changes the ABI
frodo1344.c: ...

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:x64
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:x64
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:x64
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:x64

Compiler output

Implementation: T:x64
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

aes_ni.c: aes_ni.c:35:16: error: '__builtin_ia32_aeskeygenassist128' needs target feature aes
aes_ni.c: schedule[1] = key_exp(schedule[0], 0x01);
aes_ni.c: ^
aes_ni.c: aes_ni.c:28:40: note: expanded from macro 'key_exp'
aes_ni.c: #define key_exp(k, rcon) key_expand(k, _mm_aeskeygenassist_si128(k, rcon))
aes_ni.c: ^
aes_ni.c: /usr/lib/llvm-11/lib/clang/11.0.1/include/__wmmintrin_aes.h:136:12: note: expanded from macro '_mm_aeskeygenassist_si128'
aes_ni.c: (__m128i)__builtin_ia32_aeskeygenassist128((__v2di)(__m128i)(C), (int)(R))
aes_ni.c: ^
aes_ni.c: aes_ni.c:36:16: error: '__builtin_ia32_aeskeygenassist128' needs target feature aes
aes_ni.c: schedule[2] = key_exp(schedule[1], 0x02);
aes_ni.c: ^
aes_ni.c: aes_ni.c:28:40: note: expanded from macro 'key_exp'
aes_ni.c: #define key_exp(k, rcon) key_expand(k, _mm_aeskeygenassist_si128(k, rcon))
aes_ni.c: ^
aes_ni.c: /usr/lib/llvm-11/lib/clang/11.0.1/include/__wmmintrin_aes.h:136:12: note: expanded from macro '_mm_aeskeygenassist_si128'
aes_ni.c: (__m128i)__builtin_ia32_aeskeygenassist128((__v2di)(__m128i)(C), (int)(R))
aes_ni.c: ^
aes_ni.c: aes_ni.c:37:16: error: '__builtin_ia32_aeskeygenassist128' needs target feature aes
aes_ni.c: schedule[3] = key_exp(schedule[2], 0x04);
aes_ni.c: ^
aes_ni.c: aes_ni.c:28:40: note: expanded from macro 'key_exp'
aes_ni.c: #define key_exp(k, rcon) key_expand(k, _mm_aeskeygenassist_si128(k, rcon))
aes_ni.c: ^
aes_ni.c: /usr/lib/llvm-11/lib/clang/11.0.1/include/__wmmintrin_aes.h:136:12: note: expanded from macro '_mm_aeskeygenassist_si128'
aes_ni.c: ...

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:x64

Compiler output

Implementation: T:x64
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

frodo1344.c: In file included from frodo1344.c:33:
frodo1344.c: frodo_macrify.inc: In function 'frodo_mul_add_sa_plus_e':
frodo1344.c: frodo_macrify.inc:105:24: warning: AVX vector return without AVX enabled changes the ABI [-Wpsabi]
frodo1344.c: 105 | acc[0] = _mm256_setzero_si256();
frodo1344.c: | ~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~
frodo1344.c: In file included from /usr/lib/gcc/x86_64-linux-gnu/10/include/immintrin.h:51,
frodo1344.c: from frodo_macrify.inc:8,
frodo1344.c: from frodo1344.c:33:
frodo1344.c: /usr/lib/gcc/x86_64-linux-gnu/10/include/avxintrin.h:1235:1: error: inlining failed in call to 'always_inline' '_mm256_setzero_si256': target specific option mismatch
frodo1344.c: 1235 | _mm256_setzero_si256 (void)
frodo1344.c: | ^~~~~~~~~~~~~~~~~~~~
frodo1344.c: In file included from frodo1344.c:33:
frodo1344.c: frodo_macrify.inc:108:26: note: called from here
frodo1344.c: 108 | acc[3] = _mm256_setzero_si256();
frodo1344.c: | ^~~~~~~~~~~~~~~~~~~~~~
frodo1344.c: In file included from /usr/lib/gcc/x86_64-linux-gnu/10/include/immintrin.h:51,
frodo1344.c: from frodo_macrify.inc:8,
frodo1344.c: from frodo1344.c:33:
frodo1344.c: /usr/lib/gcc/x86_64-linux-gnu/10/include/avxintrin.h:1235:1: error: inlining failed in call to 'always_inline' '_mm256_setzero_si256': target specific option mismatch
frodo1344.c: 1235 | _mm256_setzero_si256 (void)
frodo1344.c: | ^~~~~~~~~~~~~~~~~~~~
frodo1344.c: In file included from frodo1344.c:33:
frodo1344.c: frodo_macrify.inc:107:26: note: called from here
frodo1344.c: 107 | acc[2] = _mm256_setzero_si256();
frodo1344.c: | ^~~~~~~~~~~~~~~~~~~~~~
frodo1344.c: ...

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:x64