Test results for amd64, panther, crypto_kem/kyber1024

[Page version: 20250925 18:54:04]

Measurements for amd64, panther, crypto_kem Test results for amd64, panther, crypto_kem Test results for crypto_kem/kyber1024

Computer: panther
Microarchitecture: amd64; Tiger Lake (806c1)
Architecture: amd64
CPU ID: GenuineIntel-000806c1-00-bfebfbff
SUPERCOP version: 20250922
Operation: crypto_kem
Primitive: kyber1024

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
105470	111852 0 0	135262 876 1760	`avx2`	`clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
105824	113757 0 0	137246 876 1824	`avx2`	`clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
105850	93295 0 0	113876 868 1824	`avx2`	`clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
110294	118819 0 0	141516 788 1792	`avx2`	`gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
111066	97752 0 0	117606 876 1760	`avx2`	`clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
116066	94874 0 0	115788 788 1792	`avx2`	`gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
120907	92288 0 0	111508 780 1760	`avx2`	`gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
133407	91883 0 0	112276 788 1792	`avx2`	`gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
552460	51860 0 0	108056 788 1784	`compact`	`gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415
556384	39301 0 0	61741 836 1752	`ref`	`clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415
595621	32765 0 0	55189 836 1752	`ref`	`clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415
617997	13185 0 0	32691 828 1752	`ref`	`clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415
633934	38994 0 0	61664 788 1784	`ref`	`gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415
635087	30253 0 0	52565 836 1752	`ref`	`clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415
638068	60020 0 0	115861 836 1752	`compact`	`clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415
661051	36072 0 0	92061 836 1752	`compact`	`clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415
692570	13397 0 0	34176 788 1784	`ref`	`gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415
694193	35072 0 0	90613 836 1752	`compact`	`clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415
708390	6873 0 0	59955 828 1752	`compact`	`clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415
709666	12199 0 0	32400 788 1784	`ref`	`gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415
739082	5969 0 0	60216 788 1784	`compact`	`gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415
761762	11547 0 0	30656 780 1752	`ref`	`gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415
829114	6067 0 0	59832 788 1784	`compact`	`gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415
854853	13620 0 0	33651 828 1752	`ref`	`clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415
861608	5266 0 0	57968 780 1752	`compact`	`gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415
1036654	8458 0 0	62163 828 1752	`compact`	`clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415

Compiler output

KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:146:9: error: always_inline function '_mm256_loadu_si256' requires target feature 'avx', but would be inlined into function 'crypto_kem_kyber1024_avx2_constbranchindex_KeccakP1600times4_AddLanesAll' that is compiled without support for 'avx'
KeccakP-1600-times4-SIMD256.c:         Xor_In4( 0 );
KeccakP-1600-times4-SIMD256.c:         ^
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:135:42: note: expanded from macro 'Xor_In4'
KeccakP-1600-times4-SIMD256.c:     #define Xor_In4( argIndex ) lanes0 = LOAD256u( curData0[argIndex]),\
KeccakP-1600-times4-SIMD256.c:                                          ^
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:44:37: note: expanded from macro 'LOAD256u'
KeccakP-1600-times4-SIMD256.c:     #define LOAD256u(a)             _mm256_loadu_si256((const V256 *)&(a))
KeccakP-1600-times4-SIMD256.c:                                     ^
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:146:9: error: AVX vector return of type '__m256i' (vector of 4 'long long' values) without 'avx' enabled changes the ABI
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:135:42: note: expanded from macro 'Xor_In4'
KeccakP-1600-times4-SIMD256.c:     #define Xor_In4( argIndex ) lanes0 = LOAD256u( curData0[argIndex]),\
KeccakP-1600-times4-SIMD256.c:                                          ^
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:44:37: note: expanded from macro 'LOAD256u'
KeccakP-1600-times4-SIMD256.c:     #define LOAD256u(a)             _mm256_loadu_si256((const V256 *)&(a))
KeccakP-1600-times4-SIMD256.c:                                     ^
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:146:9: error: always_inline function '_mm256_loadu_si256' requires target feature 'avx', but would be inlined into function 'crypto_kem_kyber1024_avx2_constbranchindex_KeccakP1600times4_AddLanesAll' that is compiled without support for 'avx'
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:136:42: note: expanded from macro 'Xor_In4'
KeccakP-1600-times4-SIMD256.c:                                 lanes1 = LOAD256u( curData1[argIndex]),\
KeccakP-1600-times4-SIMD256.c:                                          ^
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:44:37: note: expanded from macro 'LOAD256u'
KeccakP-1600-times4-SIMD256.c:     #define LOAD256u(a)             _mm256_loadu_si256((const V256 *)&(a))
KeccakP-1600-times4-SIMD256.c:                                     ^
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:146:9: error: AVX vector return of type '__m256i' (vector of 4 'long long' values) without 'avx' enabled changes the ABI
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:136:42: note: expanded from macro 'Xor_In4'
KeccakP-1600-times4-SIMD256.c: ...

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`avx2`	`clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

Compiler output

kem.c: kem.c:24:32: warning: argument 1 of type 'uint8_t[1568]' {aka 'unsigned char[1568]'} with mismatched bound [-Warray-parameter=]
kem.c:    24 | int crypto_kem_keypair(uint8_t pk[KYBER_PUBLICKEYBYTES],
kem.c:       |                        ~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~
kem.c: In file included from kem.c:5:
kem.c: kem.h:33:33: note: previously declared as 'uint8_t *' {aka 'unsigned char *'}
kem.c:    33 | int crypto_kem_keypair(uint8_t *pk, uint8_t *sk);
kem.c:       |                        ~~~~~~~~~^~
kem.c: kem.c:25:32: warning: argument 2 of type 'uint8_t[3168]' {aka 'unsigned char[3168]'} with mismatched bound [-Warray-parameter=]
kem.c:    25 |                        uint8_t sk[KYBER_SECRETKEYBYTES])
kem.c:       |                        ~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~
kem.c: kem.h:33:46: note: previously declared as 'uint8_t *' {aka 'unsigned char *'}
kem.c:    33 | int crypto_kem_keypair(uint8_t *pk, uint8_t *sk);
kem.c:       |                                     ~~~~~~~~~^~
kem.c: kem.c:50:28: warning: argument 1 of type 'uint8_t[1568]' {aka 'unsigned char[1568]'} with mismatched bound [-Warray-parameter=]
kem.c:    50 | int crypto_kem_enc(uint8_t ct[KYBER_CIPHERTEXTBYTES],
kem.c:       |                    ~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~
kem.c: kem.h:36:29: note: previously declared as 'uint8_t *' {aka 'unsigned char *'}
kem.c:    36 | int crypto_kem_enc(uint8_t *ct, uint8_t *ss, const uint8_t *pk);
kem.c:       |                    ~~~~~~~~~^~
kem.c: kem.c:51:28: warning: argument 2 of type 'uint8_t[32]' {aka 'unsigned char[32]'} with mismatched bound [-Warray-parameter=]
kem.c:    51 |                    uint8_t ss[KYBER_SSBYTES],
kem.c:       |                    ~~~~~~~~^~~~~~~~~~~~~~~~~
kem.c: kem.h:36:42: note: previously declared as 'uint8_t *' {aka 'unsigned char *'}
kem.c:    36 | int crypto_kem_enc(uint8_t *ct, uint8_t *ss, const uint8_t *pk);
kem.c:       |                                 ~~~~~~~~~^~
kem.c: ...
poly.c: poly.c:407:42: warning: argument 5 of type 'const uint8_t[32]' {aka 'const unsigned char[32]'} with mismatched bound [-Warray-parameter=]
poly.c:   407 |                            const uint8_t seed[32],
poly.c:       |                            ~~~~~~~~~~~~~~^~~~~~~~
poly.c: In file included from poly.c:6:
poly.c: poly.h:37:43: note: previously declared as 'const uint8_t *' {aka 'const unsigned char *'}
poly.c:    37 |                            const uint8_t *seed,
poly.c:       |                            ~~~~~~~~~~~~~~~^~~~

Number of similar (implementation,compiler) pairs: 4, namely:

Implementation	Compiler
`avx2`	`gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`
`avx2`	`gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`
`avx2`	`gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (10.2.1_20210110)`
`avx2`	`gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x124F5D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_kem_kyber1024_avx2_constbranchindex_indcpa_keypair (indcpa.c:476)
   by 0x...: crypto_kem_kyber1024_avx2_constbranchindex_keypair (kem.c:27)
   by 0x...: test (try.c:126)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`avx2`	`clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x12571D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_kem_kyber1024_avx2_constbranchindex_indcpa_keypair (indcpa.c:476)
   by 0x...: crypto_kem_kyber1024_avx2_constbranchindex_keypair (kem.c:27)
   by 0x...: test (try.c:126)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`avx2`	`clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x120FDD
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_kem_kyber1024_avx2_constbranchindex_indcpa_keypair (indcpa.c:476)
   by 0x...: crypto_kem_kyber1024_avx2_constbranchindex_keypair (kem.c:27)
   by 0x...: test (try.c:126)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`avx2`	`clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10A044
   at 0x...: core (try-anything.c:73)
   by 0x...: salsa20 (try-anything.c:89)
   by 0x...: canary (try-anything.c:148)
   by 0x...: output_prepare (try-anything.c:178)
   by 0x...: test (try.c:124)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`avx2`	`clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x109FD0
   at 0x...: core (try-anything.c:68)
   by 0x...: salsa20.part.0 (try-anything.c:89)
   by 0x...: salsa20 (try-anything.c:85)
   by 0x...: canary (try-anything.c:148)
   by 0x...: output_prepare (try-anything.c:178)
   by 0x...: test (try.c:124)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`avx2`	`gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10A246
   at 0x...: st32 (try-anything.c:47)
   by 0x...: core (try-anything.c:78)
   by 0x...: salsa20.part.0 (try-anything.c:89)
   by 0x...: salsa20 (try-anything.c:85)
   by 0x...: canary (try-anything.c:148)
   by 0x...: output_prepare (try-anything.c:178)
   by 0x...: test (try.c:124)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`avx2`	`gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x11FC1D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_kem_kyber1024_avx2_constbranchindex_indcpa_keypair (indcpa.c:476)
   by 0x...: crypto_kem_kyber1024_avx2_constbranchindex_keypair (kem.c:27)
   by 0x...: test (try.c:126)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`avx2`	`gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (10.2.1_20210110)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x11FAAD
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_kem_kyber1024_avx2_constbranchindex_indcpa_keypair (indcpa.c:476)
   by 0x...: crypto_kem_kyber1024_avx2_constbranchindex_keypair (kem.c:27)
   by 0x...: test (try.c:126)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`avx2`	`gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x402680
   at 0x...: st32 (try-anything.c:47)
   by 0x...: core (try-anything.c:78)
   by 0x...: salsa20 (try-anything.c:89)
   by 0x...: canary (try-anything.c:148)
   by 0x...: output_prepare (try-anything.c:178)
   by 0x...: test (try.c:124)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 2, namely:

Implementation	Compiler
`compact`	`clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`ref`	`clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x41840D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: indcpa_keypair (kem.c:369)
   by 0x...: crypto_kem_kyber1024_compact_constbranchindex_keypair (kem.c:438)
   by 0x...: test (try.c:126)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`compact`	`clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x40B08D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: indcpa_keypair (kem.c:369)
   by 0x...: crypto_kem_kyber1024_compact_constbranchindex_keypair (kem.c:438)
   by 0x...: test (try.c:126)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`compact`	`clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x4020DA
   at 0x...: core (try-anything.c:73)
   by 0x...: salsa20 (try-anything.c:89)
   by 0x...: canary (try-anything.c:148)
   by 0x...: output_prepare (try-anything.c:178)
   by 0x...: test (try.c:124)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 2, namely:

Implementation	Compiler
`compact`	`clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`ref`	`clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x41238D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: indcpa_keypair (kem.c:369)
   by 0x...: crypto_kem_kyber1024_compact_constbranchindex_keypair (kem.c:438)
   by 0x...: test (try.c:126)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`compact`	`clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x11307D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: indcpa_keypair (kem.c:369)
   by 0x...: crypto_kem_kyber1024_compact_constbranchindex_keypair (kem.c:438)
   by 0x...: test (try.c:126)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`compact`	`gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10A27A
   at 0x...: st32 (try-anything.c:47)
   by 0x...: core (try-anything.c:78)
   by 0x...: salsa20.part.0 (try-anything.c:89)
   by 0x...: salsa20 (try-anything.c:85)
   by 0x...: canary (try-anything.c:148)
   by 0x...: output_prepare (try-anything.c:178)
   by 0x...: test (try.c:124)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 2, namely:

Implementation	Compiler
`compact`	`gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`
`ref`	`gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x112D5D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: indcpa_keypair (kem.c:369)
   by 0x...: crypto_kem_kyber1024_compact_constbranchindex_keypair (kem.c:438)
   by 0x...: test (try.c:126)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`compact`	`gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (10.2.1_20210110)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x1126ED
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: indcpa_keypair (kem.c:369)
   by 0x...: crypto_kem_kyber1024_compact_constbranchindex_keypair (kem.c:438)
   by 0x...: test (try.c:126)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`compact`	`gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x40BD2D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_kem_kyber1024_ref_constbranchindex_indcpa_keypair (indcpa.c:217)
   by 0x...: crypto_kem_kyber1024_ref_constbranchindex_keypair (kem.c:27)
   by 0x...: test (try.c:126)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`ref`	`clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x4058AD
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_kem_kyber1024_ref_constbranchindex_indcpa_keypair (indcpa.c:217)
   by 0x...: crypto_kem_kyber1024_ref_constbranchindex_keypair (kem.c:27)
   by 0x...: test (try.c:126)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`ref`	`clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x40A1CD
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_kem_kyber1024_ref_constbranchindex_indcpa_keypair (indcpa.c:217)
   by 0x...: crypto_kem_kyber1024_ref_constbranchindex_keypair (kem.c:27)
   by 0x...: test (try.c:126)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`ref`	`clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10DD7D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_kem_kyber1024_ref_constbranchindex_indcpa_keypair (indcpa.c:217)
   by 0x...: crypto_kem_kyber1024_ref_constbranchindex_keypair (kem.c:27)
   by 0x...: test (try.c:126)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`ref`	`gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10D5AD
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_kem_kyber1024_ref_constbranchindex_indcpa_keypair (indcpa.c:217)
   by 0x...: crypto_kem_kyber1024_ref_constbranchindex_keypair (kem.c:27)
   by 0x...: test (try.c:126)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`ref`	`gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (10.2.1_20210110)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10CFFD
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_kem_kyber1024_ref_constbranchindex_indcpa_keypair (indcpa.c:217)
   by 0x...: crypto_kem_kyber1024_ref_constbranchindex_keypair (kem.c:27)
   by 0x...: test (try.c:126)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`ref`	`gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`