Implementation notes: amd64, nucnuc, crypto_kem/rqc128

Computer: nucnuc
Microarchitecture: amd64; Airmont (406c3)
Architecture: amd64
CPU ID: GenuineIntel-000406c3-bfebfbff
SUPERCOP version: 20230530
Operation: crypto_kem
Primitive: rqc128

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
10158805	39095 0 24	132191 916 1720	`T:avx`	`clang_-march=native_-O3_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221019	20221005
10173147	36735 0 24	128151 916 1720	`T:avx`	`clang_-march=native_-O2_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221019	20221005
10417999	29326 0 24	119071 900 1720	`T:avx`	`clang_-march=native_-Os_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221019	20221005
11012349	30479 0 24	120903 900 1720	`T:avx`	`clang_-march=native_-O_-fomit-frame-pointer_-fwrapv_-Qunused-arguments_-fPIC_-fPIE`	20221019	20221005

Compiler output

Implementation: T:avx
Security model: timingleaks
Compiler: clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

rbc_elt.c: rbc_elt.c:466:19: error: '__builtin_ia32_pclmulqdq128' needs target feature pclmul
rbc_elt.c: __m128i a0_b0 = _mm_clmulepi64_si128(a, b, 0x00);
rbc_elt.c: ^
rbc_elt.c: /usr/lib/llvm-11/lib/clang/11.0.1/include/__wmmintrin_pclmul.h:45:13: note: expanded from macro '_mm_clmulepi64_si128'
rbc_elt.c: ((__m128i)__builtin_ia32_pclmulqdq128((__v2di)(__m128i)(X), \
rbc_elt.c: ^
rbc_elt.c: rbc_elt.c:468:19: error: '__builtin_ia32_pclmulqdq128' needs target feature pclmul
rbc_elt.c: __m128i a0_b1 = _mm_clmulepi64_si128(a, b, 0x10);
rbc_elt.c: ^
rbc_elt.c: /usr/lib/llvm-11/lib/clang/11.0.1/include/__wmmintrin_pclmul.h:45:13: note: expanded from macro '_mm_clmulepi64_si128'
rbc_elt.c: ((__m128i)__builtin_ia32_pclmulqdq128((__v2di)(__m128i)(X), \
rbc_elt.c: ^
rbc_elt.c: rbc_elt.c:469:19: error: '__builtin_ia32_pclmulqdq128' needs target feature pclmul
rbc_elt.c: __m128i a1_b0 = _mm_clmulepi64_si128(a, b, 0x01);
rbc_elt.c: ^
rbc_elt.c: /usr/lib/llvm-11/lib/clang/11.0.1/include/__wmmintrin_pclmul.h:45:13: note: expanded from macro '_mm_clmulepi64_si128'
rbc_elt.c: ((__m128i)__builtin_ia32_pclmulqdq128((__v2di)(__m128i)(X), \
rbc_elt.c: ^
rbc_elt.c: rbc_elt.c:471:19: error: '__builtin_ia32_pclmulqdq128' needs target feature pclmul
rbc_elt.c: __m128i a1_b1 = _mm_clmulepi64_si128(a, b, 0x11);
rbc_elt.c: ^
rbc_elt.c: /usr/lib/llvm-11/lib/clang/11.0.1/include/__wmmintrin_pclmul.h:45:13: note: expanded from macro '_mm_clmulepi64_si128'
rbc_elt.c: ((__m128i)__builtin_ia32_pclmulqdq128((__v2di)(__m128i)(X), \
rbc_elt.c: ^
rbc_elt.c: 4 errors generated.

Number of similar (compiler,implementation) pairs: 1, namely:

Compiler	Implementations
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:avx

Compiler output

Implementation: T:avx
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

try.c: /usr/bin/ld: /home/djb/supercop-20221005/supercop-data/nucnuc/amd64/lib/libsupercop.a(crypto_core_keccakf160064bits_optimized1600AsmX86_64_constbranchindex-KeccakP-1600-x86-64-gas.o): relocation R_X86_64_32S against `.text' can not be used when making a PIE object; recompile with -fPIE
try.c: collect2: error: ld returned 1 exit status

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:avx

Compiler output

Implementation: T:ref
Security model: timingleaks
Compiler: clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE

try.c: /usr/bin/ld: libcrypto_kem_rqc128.a(parsing.o):(.bss+0x0): multiple definition of `RBC_SQR_LOOKUP_TABLE'; libcrypto_kem_rqc128.a(kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_rqc128.a(rbc_elt.o):(.bss+0x10): multiple definition of `RBC_SQR_LOOKUP_TABLE'; libcrypto_kem_rqc128.a(kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_rqc128.a(rbc_qre.o):(.bss+0x20): multiple definition of `RBC_SQR_LOOKUP_TABLE'; libcrypto_kem_rqc128.a(kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_rqc128.a(rbc_vec.o):(.bss+0x0): multiple definition of `RBC_SQR_LOOKUP_TABLE'; libcrypto_kem_rqc128.a(kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_rqc128.a(rbc_vspace.o):(.bss+0x0): multiple definition of `RBC_SQR_LOOKUP_TABLE'; libcrypto_kem_rqc128.a(kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_rqc128.a(rqc.o):(.bss+0x0): multiple definition of `RBC_SQR_LOOKUP_TABLE'; libcrypto_kem_rqc128.a(kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_rqc128.a(gabidulin.o):(.bss+0x0): multiple definition of `RBC_SQR_LOOKUP_TABLE'; libcrypto_kem_rqc128.a(kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_rqc128.a(qpoly.o):(.bss+0x0): multiple definition of `RBC_SQR_LOOKUP_TABLE'; libcrypto_kem_rqc128.a(kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_rqc128.a(rbc_poly.o):(.bss+0x0): multiple definition of `RBC_SQR_LOOKUP_TABLE'; libcrypto_kem_rqc128.a(kem.o):(.bss+0x0): first defined here
try.c: clang: error: linker command failed with exit code 1 (use -v to see invocation)

Number of similar (compiler,implementation) pairs: 5, namely:

Compiler	Implementations
clang -march=native -O2 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -O -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -march=native -Os -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref
clang -mcpu=native -O3 -fomit-frame-pointer -fwrapv -Qunused-arguments -fPIC -fPIE	T:ref

Compiler output

Implementation: T:ref
Security model: timingleaks
Compiler: gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE

try.c: /usr/bin/ld: libcrypto_kem_rqc128.a(parsing.o):(.bss+0x0): multiple definition of `RBC_SQR_LOOKUP_TABLE'; libcrypto_kem_rqc128.a(kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_rqc128.a(rbc_elt.o):(.bss+0x0): multiple definition of `RBC_SQR_LOOKUP_TABLE'; libcrypto_kem_rqc128.a(kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_rqc128.a(rbc_qre.o):(.bss+0x0): multiple definition of `RBC_SQR_LOOKUP_TABLE'; libcrypto_kem_rqc128.a(kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_rqc128.a(rbc_vec.o):(.bss+0x0): multiple definition of `RBC_SQR_LOOKUP_TABLE'; libcrypto_kem_rqc128.a(kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_rqc128.a(rbc_vspace.o):(.bss+0x0): multiple definition of `RBC_SQR_LOOKUP_TABLE'; libcrypto_kem_rqc128.a(kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_rqc128.a(rqc.o):(.bss+0x0): multiple definition of `RBC_SQR_LOOKUP_TABLE'; libcrypto_kem_rqc128.a(kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_rqc128.a(gabidulin.o):(.bss+0x0): multiple definition of `RBC_SQR_LOOKUP_TABLE'; libcrypto_kem_rqc128.a(kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_rqc128.a(qpoly.o):(.bss+0x0): multiple definition of `RBC_SQR_LOOKUP_TABLE'; libcrypto_kem_rqc128.a(kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: libcrypto_kem_rqc128.a(rbc_poly.o):(.bss+0x0): multiple definition of `RBC_SQR_LOOKUP_TABLE'; libcrypto_kem_rqc128.a(kem.o):(.bss+0x0): first defined here
try.c: /usr/bin/ld: /home/djb/supercop-20221005/supercop-data/nucnuc/amd64/lib/libsupercop.a(crypto_core_keccakf160064bits_optimized1600AsmX86_64_constbranchindex-KeccakP-1600-x86-64-gas.o): relocation R_X86_64_32S against `.text' can not be used when making a PIE object; recompile with -fPIE
try.c: collect2: error: ld returned 1 exit status

Number of similar (compiler,implementation) pairs: 4, namely:

Compiler	Implementations
gcc -march=native -mtune=native -O2 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O3 -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -O -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref
gcc -march=native -mtune=native -Os -fomit-frame-pointer -fwrapv -fPIC -fPIE	T:ref