Implementation notes: amd64, panther, crypto_sign/aimer256f

Compiler output

fips202.c: In file included from fips202.c:11:
fips202.c: ./KeccakP-1600-SnP.h:41:82: warning: multi-line // comment [-Wcomment]
fips202.c: //#define KeccakP1600_StaticInitialize                                           \
fips202.c:                                                                                  ^
fips202.c: ./KeccakP-1600-SnP.h:56:82: warning: multi-line // comment [-Wcomment]
fips202.c: //#define KeccakP1600_OverwriteBytes                                             \
fips202.c:                                                                                  ^
fips202.c: ./KeccakP-1600-SnP.h:63:82: warning: multi-line // comment [-Wcomment]
fips202.c: //#define KeccakP1600_OverwriteWithZeroes                                        \
fips202.c:                                                                                  ^
fips202.c: ./KeccakP-1600-SnP.h:68:82: warning: multi-line // comment [-Wcomment]
fips202.c: //#define KeccakP1600_Permute_Nrounds                                            \
fips202.c:                                                                                  ^
fips202.c: ./KeccakP-1600-SnP.h:72:82: warning: multi-line // comment [-Wcomment]
fips202.c: //#define KeccakP1600_Permute_12rounds                                           \
fips202.c:                                                                                  ^
fips202.c: ./KeccakP-1600-SnP.h:76:82: warning: multi-line // comment [-Wcomment]
fips202.c: //#define KeccakP1600_Permute_24rounds                                           \
fips202.c:                                                                                  ^
fips202.c: ./KeccakP-1600-SnP.h:85:82: warning: multi-line // comment [-Wcomment]
fips202.c: //#define KeccakP1600_ExtractAndAddBytes                                         \
fips202.c:                                                                                  ^
fips202.c: ./KeccakP-1600-SnP.h:93:82: warning: multi-line // comment [-Wcomment]
fips202.c: //#define KeccakF1600_FastLoop_Absorb                                            \
fips202.c:                                                                                  ^
fips202.c: ...

Compiler output

KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:149:9: error: always_inline function '_mm256_loadu_si256' requires target feature 'avx', but would be inlined into function 'KeccakP1600times4_AddLanesAll' that is compiled without support for 'avx'
KeccakP-1600-times4-SIMD256.c:         Xor_In4( 0 );
KeccakP-1600-times4-SIMD256.c:         ^
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:138:38: note: expanded from macro 'Xor_In4'
KeccakP-1600-times4-SIMD256.c: #define Xor_In4( argIndex ) lanes0 = LOAD256u( curData0[argIndex]),\
KeccakP-1600-times4-SIMD256.c:                                      ^
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:49:33: note: expanded from macro 'LOAD256u'
KeccakP-1600-times4-SIMD256.c: #define LOAD256u(a)             _mm256_loadu_si256((const V256 *)&(a))
KeccakP-1600-times4-SIMD256.c:                                 ^
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:149:9: error: AVX vector return of type '__m256i' (vector of 4 'long long' values) without 'avx' enabled changes the ABI
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:138:38: note: expanded from macro 'Xor_In4'
KeccakP-1600-times4-SIMD256.c: #define Xor_In4( argIndex ) lanes0 = LOAD256u( curData0[argIndex]),\
KeccakP-1600-times4-SIMD256.c:                                      ^
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:49:33: note: expanded from macro 'LOAD256u'
KeccakP-1600-times4-SIMD256.c: #define LOAD256u(a)             _mm256_loadu_si256((const V256 *)&(a))
KeccakP-1600-times4-SIMD256.c:                                 ^
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:149:9: error: always_inline function '_mm256_loadu_si256' requires target feature 'avx', but would be inlined into function 'KeccakP1600times4_AddLanesAll' that is compiled without support for 'avx'
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:139:47: note: expanded from macro 'Xor_In4'
KeccakP-1600-times4-SIMD256.c:                                      lanes1 = LOAD256u( curData1[argIndex]),\
KeccakP-1600-times4-SIMD256.c:                                               ^
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:49:33: note: expanded from macro 'LOAD256u'
KeccakP-1600-times4-SIMD256.c: #define LOAD256u(a)             _mm256_loadu_si256((const V256 *)&(a))
KeccakP-1600-times4-SIMD256.c:                                 ^
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:149:9: error: AVX vector return of type '__m256i' (vector of 4 'long long' values) without 'avx' enabled changes the ABI
KeccakP-1600-times4-SIMD256.c: KeccakP-1600-times4-SIMD256.c:139:47: note: expanded from macro 'Xor_In4'
KeccakP-1600-times4-SIMD256.c: ...

Compiler output

fips202.c: In file included from fips202.c:11:
fips202.c: KeccakP-1600-SnP.h:41:1: warning: multi-line comment [-Wcomment]
fips202.c:    41 | //#define KeccakP1600_StaticInitialize                                           \
fips202.c:       | ^
fips202.c: KeccakP-1600-SnP.h:56:1: warning: multi-line comment [-Wcomment]
fips202.c:    56 | //#define KeccakP1600_OverwriteBytes                                             \
fips202.c:       | ^
fips202.c: KeccakP-1600-SnP.h:63:1: warning: multi-line comment [-Wcomment]
fips202.c:    63 | //#define KeccakP1600_OverwriteWithZeroes                                        \
fips202.c:       | ^
fips202.c: KeccakP-1600-SnP.h:68:1: warning: multi-line comment [-Wcomment]
fips202.c:    68 | //#define KeccakP1600_Permute_Nrounds                                            \
fips202.c:       | ^
fips202.c: KeccakP-1600-SnP.h:72:1: warning: multi-line comment [-Wcomment]
fips202.c:    72 | //#define KeccakP1600_Permute_12rounds                                           \
fips202.c:       | ^
fips202.c: KeccakP-1600-SnP.h:76:1: warning: multi-line comment [-Wcomment]
fips202.c:    76 | //#define KeccakP1600_Permute_24rounds                                           \
fips202.c:       | ^
fips202.c: KeccakP-1600-SnP.h:85:1: warning: multi-line comment [-Wcomment]
fips202.c:    85 | //#define KeccakP1600_ExtractAndAddBytes                                         \
fips202.c:       | ^
fips202.c: KeccakP-1600-SnP.h:93:1: warning: multi-line comment [-Wcomment]
fips202.c:    93 | //#define KeccakF1600_FastLoop_Absorb                                            \
fips202.c:       | ^
fips202.c: ...

Namespace violations

KeccakP-1600-AVX2.o ALLON a
KeccakP-1600-AVX2.o KeccakF1600_FastLoop_Absorb T
KeccakP-1600-AVX2.o KeccakP1600_12rounds_FastLoop_Absorb T
KeccakP-1600-AVX2.o KeccakP1600_AddByte T
KeccakP-1600-AVX2.o KeccakP1600_AddBytes T
KeccakP-1600-AVX2.o KeccakP1600_ExtractAndAddBytes T
KeccakP-1600-AVX2.o KeccakP1600_ExtractBytes T
KeccakP-1600-AVX2.o KeccakP1600_Initialize T
KeccakP-1600-AVX2.o KeccakP1600_OverwriteBytes T
KeccakP-1600-AVX2.o KeccakP1600_OverwriteWithZeroes T
KeccakP-1600-AVX2.o KeccakP1600_Permute_12rounds T
KeccakP-1600-AVX2.o KeccakP1600_Permute_24rounds T
KeccakP-1600-AVX2.o KeccakP1600_Permute_Nrounds T
KeccakP-1600-AVX2.o _KeccakF1600_FastLoop_Absorb T
KeccakP-1600-AVX2.o _KeccakP1600_12rounds_FastLoop_Absorb T
KeccakP-1600-AVX2.o _KeccakP1600_AddByte T
KeccakP-1600-AVX2.o _KeccakP1600_AddBytes T
KeccakP-1600-AVX2.o _KeccakP1600_ExtractAndAddBytes T
KeccakP-1600-AVX2.o _KeccakP1600_ExtractBytes T
KeccakP-1600-AVX2.o _KeccakP1600_Initialize T
KeccakP-1600-AVX2.o _KeccakP1600_OverwriteBytes T
KeccakP-1600-AVX2.o _KeccakP1600_OverwriteWithZeroes T
KeccakP-1600-AVX2.o _KeccakP1600_Permute_12rounds T
KeccakP-1600-AVX2.o _KeccakP1600_Permute_24rounds T
KeccakP-1600-AVX2.o _KeccakP1600_Permute_Nrounds T
KeccakP-1600-times4-SIMD256.o KeccakF1600times4_FastLoop_Absorb T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_12rounds_FastLoop_Absorb T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_AddBytes T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_AddLanesAll T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_ExtractAndAddBytes T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_ExtractAndAddLanesAll T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_ExtractBytes T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_ExtractLanesAll T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_InitializeAll T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_OverwriteBytes T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_OverwriteLanesAll T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_OverwriteWithZeroes T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_PermuteAll_12rounds T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_PermuteAll_24rounds T
aes.o aes128_ctr T
aes.o aes128_ctr_keyexp T
aes.o aes128_ctx_release T
aes.o aes128_ecb T
aes.o aes128_ecb_keyexp T
aes.o aes192_ctr T
aes.o aes192_ctr_keyexp T
aes.o aes192_ctx_release T
aes.o aes192_ecb T
aes.o aes192_ecb_keyexp T
aes.o aes256_ctr T
aes.o aes256_ctr_keyexp T
aes.o aes256_ctx_release T
aes.o aes256_ecb T
aes.o aes256_ecb_keyexp T
aim2.o samsungsds_aimer256f_avx2_GF_exp_invmer_e_1 T
aim2.o samsungsds_aimer256f_avx2_GF_exp_invmer_e_2 T
aim2.o samsungsds_aimer256f_avx2_GF_exp_invmer_e_3 T
aim2.o samsungsds_aimer256f_avx2_GF_exp_mer_e_star T
aim2.o samsungsds_aimer256f_avx2_aim2 T
aim2.o samsungsds_aimer256f_avx2_aim2_sbox_outputs T
aim2.o samsungsds_aimer256f_avx2_generate_matrices_L_and_U T
aim2.o samsungsds_aimer256f_avx2_generate_matrix_LU T
field.o samsungsds_aimer256f_avx2_GF_add T
field.o samsungsds_aimer256f_avx2_GF_copy T
field.o samsungsds_aimer256f_avx2_GF_from_bytes T
field.o samsungsds_aimer256f_avx2_GF_mul T
field.o samsungsds_aimer256f_avx2_GF_mul_N T
field.o samsungsds_aimer256f_avx2_GF_mul_add T
field.o samsungsds_aimer256f_avx2_GF_mul_add_N T
field.o samsungsds_aimer256f_avx2_GF_set0 T
field.o samsungsds_aimer256f_avx2_GF_sqr T
field.o samsungsds_aimer256f_avx2_GF_sqr_N T
field.o samsungsds_aimer256f_avx2_GF_to_bytes T
field.o samsungsds_aimer256f_avx2_GF_transposed_matmul T
field.o samsungsds_aimer256f_avx2_GF_transposed_matmul_add_N T
field.o samsungsds_aimer256f_avx2_POLY_mul_add_N T
field.o samsungsds_aimer256f_avx2_POLY_red_N T
fips202.o fips202avx_sha3_256 T
fips202.o fips202avx_sha3_256_absorb T
fips202.o fips202avx_sha3_256_finalize T
fips202.o fips202avx_sha3_256_init T
fips202.o fips202avx_shake128 T
fips202.o fips202avx_shake128_absorb T
fips202.o fips202avx_shake128_finalize T
fips202.o fips202avx_shake128_init T
fips202.o fips202avx_shake128_squeeze T
fips202.o fips202avx_shake256 T
fips202.o fips202avx_shake256_absorb T
fips202.o fips202avx_shake256_finalize T
fips202.o fips202avx_shake256_init T
fips202.o fips202avx_shake256_squeeze T
hash.o samsungsds_aimer256f_avx2_hash_final T
hash.o samsungsds_aimer256f_avx2_hash_final_x4 T
hash.o samsungsds_aimer256f_avx2_hash_init T
hash.o samsungsds_aimer256f_avx2_hash_init_prefix T
hash.o samsungsds_aimer256f_avx2_hash_init_prefix_x4 T
hash.o samsungsds_aimer256f_avx2_hash_init_x4 T
hash.o samsungsds_aimer256f_avx2_hash_squeeze T
hash.o samsungsds_aimer256f_avx2_hash_squeeze_x4 T
hash.o samsungsds_aimer256f_avx2_hash_update T
hash.o samsungsds_aimer256f_avx2_hash_update_x4 T
hash.o samsungsds_aimer256f_avx2_hash_update_x4_1 T
sign.o samsungsds_aimer256f_avx2_aim2_mpc_N T
sign.o samsungsds_aimer256f_avx2_commit_and_expand_tape_x4 T
sign.o samsungsds_aimer256f_avx2_crypto_sign_signature T
sign.o samsungsds_aimer256f_avx2_crypto_sign_verify T
sign.o samsungsds_aimer256f_avx2_run_phase_1 T
sign.o samsungsds_aimer256f_avx2_run_phase_2_and_3 T
tree.o samsungsds_aimer256f_avx2_expand_trees T
tree.o samsungsds_aimer256f_avx2_reconstruct_tree T
tree.o samsungsds_aimer256f_avx2_reveal_all_but T

Namespace violations

aes.o aes128_ctr T
aes.o aes128_ctr_keyexp T
aes.o aes128_ctx_release T
aes.o aes128_ecb T
aes.o aes128_ecb_keyexp T
aes.o aes192_ctr T
aes.o aes192_ctr_keyexp T
aes.o aes192_ctx_release T
aes.o aes192_ecb T
aes.o aes192_ecb_keyexp T
aes.o aes256_ctr T
aes.o aes256_ctr_keyexp T
aes.o aes256_ctx_release T
aes.o aes256_ecb T
aes.o aes256_ecb_keyexp T
aim2.o samsungsds_aimer256f_mem_opt_GF_exp_invmer_e_1 T
aim2.o samsungsds_aimer256f_mem_opt_GF_exp_invmer_e_2 T
aim2.o samsungsds_aimer256f_mem_opt_GF_exp_invmer_e_3 T
aim2.o samsungsds_aimer256f_mem_opt_GF_exp_mer_e_star T
aim2.o samsungsds_aimer256f_mem_opt_aim2 T
aim2.o samsungsds_aimer256f_mem_opt_aim2_sbox_outputs T
aim2.o samsungsds_aimer256f_mem_opt_generate_matrices_L_and_U T
aim2.o samsungsds_aimer256f_mem_opt_generate_matrix_LU T
field.o samsungsds_aimer256f_mem_opt_GF_add T
field.o samsungsds_aimer256f_mem_opt_GF_copy T
field.o samsungsds_aimer256f_mem_opt_GF_from_bytes T
field.o samsungsds_aimer256f_mem_opt_GF_mul T
field.o samsungsds_aimer256f_mem_opt_GF_mul_add T
field.o samsungsds_aimer256f_mem_opt_GF_mul_add_s T
field.o samsungsds_aimer256f_mem_opt_GF_mul_s T
field.o samsungsds_aimer256f_mem_opt_GF_set0 T
field.o samsungsds_aimer256f_mem_opt_GF_sqr_s T
field.o samsungsds_aimer256f_mem_opt_GF_to_bytes T
field.o samsungsds_aimer256f_mem_opt_GF_transposed_matmul T
field.o samsungsds_aimer256f_mem_opt_GF_transposed_matmul_add T
fips202.o sha3_256 T
fips202.o sha3_256_inc_absorb T
fips202.o sha3_256_inc_ctx_clone T
fips202.o sha3_256_inc_ctx_release T
fips202.o sha3_256_inc_finalize T
fips202.o sha3_256_inc_init T
fips202.o sha3_384 T
fips202.o sha3_384_inc_absorb T
fips202.o sha3_384_inc_ctx_clone T
fips202.o sha3_384_inc_ctx_release T
fips202.o sha3_384_inc_finalize T
fips202.o sha3_384_inc_init T
fips202.o sha3_512 T
fips202.o sha3_512_inc_absorb T
fips202.o sha3_512_inc_ctx_clone T
fips202.o sha3_512_inc_ctx_release T
fips202.o sha3_512_inc_finalize T
fips202.o sha3_512_inc_init T
fips202.o shake128 T
fips202.o shake128_absorb T
fips202.o shake128_ctx_clone T
fips202.o shake128_ctx_release T
fips202.o shake128_inc_absorb T
fips202.o shake128_inc_ctx_clone T
fips202.o shake128_inc_ctx_release T
fips202.o shake128_inc_finalize T
fips202.o shake128_inc_init T
fips202.o shake128_inc_squeeze T
fips202.o shake128_squeezeblocks T
fips202.o shake256 T
fips202.o shake256_absorb T
fips202.o shake256_ctx_clone T
fips202.o shake256_ctx_release T
fips202.o shake256_inc_absorb T
fips202.o shake256_inc_ctx_clone T
fips202.o shake256_inc_ctx_release T
fips202.o shake256_inc_finalize T
fips202.o shake256_inc_init T
fips202.o shake256_inc_squeeze T
fips202.o shake256_squeezeblocks T
hash.o samsungsds_aimer256f_mem_opt_hash_ctx_clone T
hash.o samsungsds_aimer256f_mem_opt_hash_ctx_release T
hash.o samsungsds_aimer256f_mem_opt_hash_final T
hash.o samsungsds_aimer256f_mem_opt_hash_init T
hash.o samsungsds_aimer256f_mem_opt_hash_init_prefix T
hash.o samsungsds_aimer256f_mem_opt_hash_squeeze T
hash.o samsungsds_aimer256f_mem_opt_hash_update T
sign.o samsungsds_aimer256f_mem_opt_aim2_mpc T
sign.o samsungsds_aimer256f_mem_opt_commit_and_expand_tape T
sign.o samsungsds_aimer256f_mem_opt_crypto_sign_signature T
sign.o samsungsds_aimer256f_mem_opt_crypto_sign_verify T
sign.o samsungsds_aimer256f_mem_opt_run_phase_1 T
sign.o samsungsds_aimer256f_mem_opt_run_phase_1_to_3 T
sign.o samsungsds_aimer256f_mem_opt_run_phase_1_to_5 T
tree.o samsungsds_aimer256f_mem_opt_expand_tree T
tree.o samsungsds_aimer256f_mem_opt_reconstruct_tree T
tree.o samsungsds_aimer256f_mem_opt_reveal_all_but T

Namespace violations

aes.o aes128_ctr T
aes.o aes128_ctr_keyexp T
aes.o aes128_ctx_release T
aes.o aes128_ecb T
aes.o aes128_ecb_keyexp T
aes.o aes192_ctr T
aes.o aes192_ctr_keyexp T
aes.o aes192_ctx_release T
aes.o aes192_ecb T
aes.o aes192_ecb_keyexp T
aes.o aes256_ctr T
aes.o aes256_ctr_keyexp T
aes.o aes256_ctx_release T
aes.o aes256_ecb T
aes.o aes256_ecb_keyexp T
aim2.o samsungsds_aimer256f_ref_GF_exp_invmer_e_1 T
aim2.o samsungsds_aimer256f_ref_GF_exp_invmer_e_2 T
aim2.o samsungsds_aimer256f_ref_GF_exp_invmer_e_3 T
aim2.o samsungsds_aimer256f_ref_GF_exp_mer_e_star T
aim2.o samsungsds_aimer256f_ref_aim2 T
aim2.o samsungsds_aimer256f_ref_aim2_sbox_outputs T
aim2.o samsungsds_aimer256f_ref_generate_matrices_L_and_U T
aim2.o samsungsds_aimer256f_ref_generate_matrix_LU T
field.o samsungsds_aimer256f_ref_GF_add T
field.o samsungsds_aimer256f_ref_GF_copy T
field.o samsungsds_aimer256f_ref_GF_from_bytes T
field.o samsungsds_aimer256f_ref_GF_mul T
field.o samsungsds_aimer256f_ref_GF_mul_add T
field.o samsungsds_aimer256f_ref_GF_mul_add_s T
field.o samsungsds_aimer256f_ref_GF_mul_s T
field.o samsungsds_aimer256f_ref_GF_set0 T
field.o samsungsds_aimer256f_ref_GF_sqr_s T
field.o samsungsds_aimer256f_ref_GF_to_bytes T
field.o samsungsds_aimer256f_ref_GF_transposed_matmul T
field.o samsungsds_aimer256f_ref_GF_transposed_matmul_add T
fips202.o sha3_256 T
fips202.o sha3_256_inc_absorb T
fips202.o sha3_256_inc_ctx_clone T
fips202.o sha3_256_inc_ctx_release T
fips202.o sha3_256_inc_finalize T
fips202.o sha3_256_inc_init T
fips202.o sha3_384 T
fips202.o sha3_384_inc_absorb T
fips202.o sha3_384_inc_ctx_clone T
fips202.o sha3_384_inc_ctx_release T
fips202.o sha3_384_inc_finalize T
fips202.o sha3_384_inc_init T
fips202.o sha3_512 T
fips202.o sha3_512_inc_absorb T
fips202.o sha3_512_inc_ctx_clone T
fips202.o sha3_512_inc_ctx_release T
fips202.o sha3_512_inc_finalize T
fips202.o sha3_512_inc_init T
fips202.o shake128 T
fips202.o shake128_absorb T
fips202.o shake128_ctx_clone T
fips202.o shake128_ctx_release T
fips202.o shake128_inc_absorb T
fips202.o shake128_inc_ctx_clone T
fips202.o shake128_inc_ctx_release T
fips202.o shake128_inc_finalize T
fips202.o shake128_inc_init T
fips202.o shake128_inc_squeeze T
fips202.o shake128_squeezeblocks T
fips202.o shake256 T
fips202.o shake256_absorb T
fips202.o shake256_ctx_clone T
fips202.o shake256_ctx_release T
fips202.o shake256_inc_absorb T
fips202.o shake256_inc_ctx_clone T
fips202.o shake256_inc_ctx_release T
fips202.o shake256_inc_finalize T
fips202.o shake256_inc_init T
fips202.o shake256_inc_squeeze T
fips202.o shake256_squeezeblocks T
hash.o samsungsds_aimer256f_ref_hash_ctx_clone T
hash.o samsungsds_aimer256f_ref_hash_ctx_release T
hash.o samsungsds_aimer256f_ref_hash_final T
hash.o samsungsds_aimer256f_ref_hash_init T
hash.o samsungsds_aimer256f_ref_hash_init_prefix T
hash.o samsungsds_aimer256f_ref_hash_squeeze T
hash.o samsungsds_aimer256f_ref_hash_update T
sign.o samsungsds_aimer256f_ref_aim2_mpc T
sign.o samsungsds_aimer256f_ref_commit_and_expand_tape T
sign.o samsungsds_aimer256f_ref_crypto_sign_signature T
sign.o samsungsds_aimer256f_ref_crypto_sign_verify T
sign.o samsungsds_aimer256f_ref_run_phase_1 T
sign.o samsungsds_aimer256f_ref_run_phase_2_and_3 T
tree.o samsungsds_aimer256f_ref_expand_trees T
tree.o samsungsds_aimer256f_ref_reconstruct_tree T
tree.o samsungsds_aimer256f_ref_reveal_all_but T

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x4028C0
   at 0x...: st32 (try-anything.c:47)
   by 0x...: core (try-anything.c:78)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:124)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x41D29B
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_aimer256f_avx2_constbranchindex_keypair (sign.c:311)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x41899B
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_aimer256f_avx2_constbranchindex_keypair (sign.c:311)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x4022AE
   at 0x...: core (try-anything.c:73)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:124)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x12245B
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_aimer256f_avx2_constbranchindex_keypair (sign.c:311)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10A45A
   at 0x...: st32 (try-anything.c:47)
   by 0x...: core (try-anything.c:78)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: salsa20 (try-anything.c:81)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:124)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x121DDB
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_aimer256f_avx2_constbranchindex_keypair (sign.c:311)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x120E9B
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_aimer256f_avx2_constbranchindex_keypair (sign.c:311)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x4028D0
   at 0x...: st32 (try-anything.c:47)
   by 0x...: core (try-anything.c:78)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:124)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x411AEB
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_aimer256f_mem_opt_constbranchindex_keypair (sign.c:371)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x409C0B
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_aimer256f_mem_opt_constbranchindex_keypair (sign.c:371)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x4022BE
   at 0x...: core (try-anything.c:73)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:124)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x40E5EB
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_aimer256f_mem_opt_constbranchindex_keypair (sign.c:371)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x11302B
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_aimer256f_mem_opt_constbranchindex_keypair (sign.c:371)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10A44A
   at 0x...: st32 (try-anything.c:47)
   by 0x...: core (try-anything.c:78)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: salsa20 (try-anything.c:81)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:124)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x1122FB
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_aimer256f_mem_opt_constbranchindex_keypair (sign.c:371)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x11110B
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_aimer256f_mem_opt_constbranchindex_keypair (sign.c:371)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x41162B
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_aimer256f_ref_constbranchindex_keypair (sign.c:283)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x4097DB
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_aimer256f_ref_constbranchindex_keypair (sign.c:283)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x40DF9B
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_aimer256f_ref_constbranchindex_keypair (sign.c:283)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x11291B
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_aimer256f_ref_constbranchindex_keypair (sign.c:283)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x111D8B
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_aimer256f_ref_constbranchindex_keypair (sign.c:283)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x110D2B
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_aimer256f_ref_constbranchindex_keypair (sign.c:283)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)