Test results for amd64, panther, crypto_sign/picnicl3full

[Page version: 20250925 18:54:04]

Measurements for amd64, panther, crypto_sign Test results for amd64, panther, crypto_sign Test results for crypto_sign/picnicl3full

Computer: panther
Microarchitecture: amd64; Tiger Lake (806c1)
Architecture: amd64
CPU ID: GenuineIntel-000806c1-00-bfebfbff
SUPERCOP version: 20250922
Operation: crypto_sign
Primitive: picnicl3full

Time	Object size	Test size	Implementation	Compiler	Benchmark date	SUPERCOP version
10696194	144341 152 0	237858 1092 1856	`optimizedct/avx2`	`clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
10738073	130435 152 0	224002 1092 1824	`optimizedct/avx2`	`clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
11168086	123166 152 0	214024 1084 1856	`optimizedct/avx2`	`clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
11180671	140649 160 0	232811 1004 1856	`optimizedct/avx2`	`gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
11248961	126635 152 0	216882 1092 1792	`optimizedct/avx2`	`clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
11637411	128432 160 0	219451 1004 1856	`optimizedct/avx2`	`gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
11674185	126095 160 0	216547 1004 1856	`optimizedct/avx2`	`gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
12112619	144672 152 0	236954 1092 1792	`optimizedct/avx2`	`clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
12368549	123363 152 0	211465 1084 1792	`optimizedct/sse2`	`clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
12398724	134110 152 0	222185 1084 1824	`optimizedct/sse2`	`clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
12687370	119759 160 0	209115 996 1824	`optimizedct/avx2`	`gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
13403080	133481 160 0	219858 996 1824	`optimizedct/sse2`	`gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
13493915	119159 160 0	203954 996 1824	`optimizedct/sse2`	`gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
13829969	120992 160 0	206242 996 1824	`optimizedct/sse2`	`gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
14913535	133284 152 0	220065 1084 1760	`optimizedct/sse2`	`clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
15134850	113792 160 0	197354 988 1792	`optimizedct/sse2`	`gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
16110601	128778 160 0	215202 996 1824	`optimizedct/c`	`gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
17045487	131341 152 0	219569 1084 1824	`optimizedct/c`	`clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
17124320	119522 152 0	207761 1084 1792	`optimizedct/c`	`clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
17492592	128537 152 0	215529 1084 1760	`optimizedct/c`	`clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
18774039	116662 152 0	202007 1076 1824	`optimizedct/sse2`	`clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
19127078	119843 152 0	204609 1084 1760	`optimizedct/sse2`	`clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
23363263	117505 160 0	202778 996 1824	`optimizedct/c`	`gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
23879866	113584 152 0	198393 1084 1760	`optimizedct/c`	`clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
24230000	111411 152 0	196791 1076 1824	`optimizedct/c`	`clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
25560492	116145 160 0	200818 996 1824	`optimizedct/c`	`gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
35566851	110696 160 0	194258 988 1792	`optimizedct/c`	`gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250925	20250922
83859753	1261323 100 0	1290351 988 1752	`T:ref`	`clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415
84809963	1300610 100 0	1331921 996 1784	`T:ref`	`clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415
85050618	1291301 100 0	1322833 996 1752	`T:ref`	`clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415
87434465	1293306 100 0	1325665 996 1784	`T:ref`	`clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415
88199838	1279947 4 0	1312208 852 1816	`T:ref`	`gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415
92023557	1266277 4 0	1296536 852 1816	`T:ref`	`gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415
109261962	1261990 4 0	1291704 852 1816	`T:ref`	`gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415
110789410	1255915 4 0	1284504 844 1784	`T:ref`	`gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415
128543559	1263477 100 0	1292919 988 1752	`T:ref`	`clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall`	20250418	20250415

Compiler output

hash.c: hash.c:23:16: warning: unused variable 'ret' [-Wunused-variable]
hash.c:     HashReturn ret = Keccak_HashUpdate(ctx, data, byteLen * 8);
hash.c:                ^
hash.c: hash.c:42:16: warning: unused variable 'ret' [-Wunused-variable]
hash.c:     HashReturn ret = Keccak_HashFinal(ctx, NULL);
hash.c:                ^
hash.c: hash.c:48:16: warning: unused variable 'ret' [-Wunused-variable]
hash.c:     HashReturn ret = Keccak_HashSqueeze(ctx, digest, byteLen * 8);
hash.c:                ^
hash.c: 3 warnings generated.

Number of similar (implementation,compiler) pairs: 5, namely:

Implementation	Compiler
`T:ref`	`clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`T:ref`	`clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`T:ref`	`clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`T:ref`	`clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`T:ref`	`clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

Compiler output

hash.c: hash.c: In function 'HashUpdate':
hash.c: hash.c:23:16: warning: unused variable 'ret' [-Wunused-variable]
hash.c:    23 |     HashReturn ret = Keccak_HashUpdate(ctx, data, byteLen * 8);
hash.c:       |                ^~~
hash.c: hash.c: In function 'HashFinal':
hash.c: hash.c:42:16: warning: unused variable 'ret' [-Wunused-variable]
hash.c:    42 |     HashReturn ret = Keccak_HashFinal(ctx, NULL);
hash.c:       |                ^~~
hash.c: hash.c: In function 'HashSqueeze':
hash.c: hash.c:48:16: warning: unused variable 'ret' [-Wunused-variable]
hash.c:    48 |     HashReturn ret = Keccak_HashSqueeze(ctx, digest, byteLen * 8);
hash.c:       |                ^~~

Number of similar (implementation,compiler) pairs: 4, namely:

Implementation	Compiler
`T:ref`	`gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`
`T:ref`	`gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`
`T:ref`	`gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (10.2.1_20210110)`
`T:ref`	`gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`

Namespace violations

KeccakHashtimes4.o Keccak_HashFinaltimes4 T
KeccakHashtimes4.o Keccak_HashInitializetimes4 T
KeccakHashtimes4.o Keccak_HashSqueezetimes4 T
KeccakHashtimes4.o Keccak_HashUpdatetimes4 T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorb T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorbLastFewBits T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeInitialize T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeSqueeze T
compat.o picnic_explicit_bzero T
compat.o picnic_timingsafe_bcmp T
io.o mzd_from_char_array T
io.o mzd_to_char_array T
lowmc.o lowmc_compute T
lowmc.o lowmc_record_state T
lowmc_192_192_4.o lowmc_192_192_4 D
mpc_lowmc.o get_zkbpp_lowmc_implementation T
mpc_lowmc.o get_zkbpp_lowmc_verify_implementation T
mpc_lowmc.o get_zkbpp_share_implentation T
mzd_additional.o mzd_addmul_v_s128_128 T
mzd_additional.o mzd_addmul_v_s128_129 T
mzd_additional.o mzd_addmul_v_s128_192 T
mzd_additional.o mzd_addmul_v_s128_256 T
mzd_additional.o mzd_addmul_v_s256_128 T
mzd_additional.o mzd_addmul_v_s256_129 T
mzd_additional.o mzd_addmul_v_s256_192 T
mzd_additional.o mzd_addmul_v_s256_256 T
mzd_additional.o mzd_addmul_v_uint64_128 T
mzd_additional.o mzd_addmul_v_uint64_129 T
mzd_additional.o mzd_addmul_v_uint64_192 T
mzd_additional.o mzd_addmul_v_uint64_256 T
mzd_additional.o mzd_and_s128_128 T
mzd_additional.o mzd_and_s128_256 T
mzd_additional.o mzd_and_s256_128 T
mzd_additional.o mzd_and_s256_256 T
mzd_additional.o mzd_and_uint64_128 T
mzd_additional.o mzd_and_uint64_192 T
mzd_additional.o mzd_and_uint64_256 T
mzd_additional.o mzd_copy_s128_128 T
mzd_additional.o mzd_copy_s128_256 T
mzd_additional.o mzd_copy_s256_128 T
mzd_additional.o mzd_copy_s256_256 T
mzd_additional.o mzd_copy_uint64_128 T
mzd_additional.o mzd_copy_uint64_192 T
mzd_additional.o mzd_copy_uint64_256 T
mzd_additional.o mzd_local_init_ex T
mzd_additional.o mzd_mul_v_s128_128 T
mzd_additional.o mzd_mul_v_s128_129 T
mzd_additional.o mzd_mul_v_s128_192 T
mzd_additional.o mzd_mul_v_s128_256 T
mzd_additional.o mzd_mul_v_s256_128 T
mzd_additional.o mzd_mul_v_s256_129 T
mzd_additional.o mzd_mul_v_s256_192 T
mzd_additional.o mzd_mul_v_s256_256 T
mzd_additional.o mzd_mul_v_uint64_128 T
mzd_additional.o mzd_mul_v_uint64_129 T
mzd_additional.o mzd_mul_v_uint64_192 T
mzd_additional.o mzd_mul_v_uint64_256 T
mzd_additional.o mzd_shift_left_uint64_128 T
mzd_additional.o mzd_shift_left_uint64_192 T
mzd_additional.o mzd_shift_left_uint64_256 T
mzd_additional.o mzd_shift_right_uint64_128 T
mzd_additional.o mzd_shift_right_uint64_192 T
mzd_additional.o mzd_shift_right_uint64_256 T
mzd_additional.o mzd_xor_s128_128 T
mzd_additional.o mzd_xor_s128_256 T
mzd_additional.o mzd_xor_s256_1024 T
mzd_additional.o mzd_xor_s256_128 T
mzd_additional.o mzd_xor_s256_1280 T
mzd_additional.o mzd_xor_s256_256 T
mzd_additional.o mzd_xor_s256_768 T
mzd_additional.o mzd_xor_uint64_128 T
mzd_additional.o mzd_xor_uint64_192 T
mzd_additional.o mzd_xor_uint64_256 T
picnic.o picnic_clear_private_key T
picnic.o picnic_get_lowmc_block_size T
picnic.o picnic_get_param_name T
picnic.o picnic_get_private_key_param T
picnic.o picnic_get_private_key_size T
picnic.o picnic_get_public_key_param T
picnic.o picnic_get_public_key_size T
picnic.o picnic_keygen T
picnic.o picnic_read_private_key T
picnic.o picnic_read_public_key T
picnic.o picnic_sign T
picnic.o picnic_signature_size T
picnic.o picnic_sk_to_pk T
picnic.o picnic_validate_keypair T
picnic.o picnic_verify T
picnic.o picnic_write_private_key T
picnic.o picnic_write_public_key T
picnic_impl.o picnic_impl_sign T
picnic_impl.o picnic_impl_verify T
picnic_instances.o picnic_instance_get T
randomness.o rand_bits T

Number of similar (implementation,compiler) pairs: 9, namely:

Implementation	Compiler
`optimizedct/avx2`	`clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`optimizedct/avx2`	`clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`optimizedct/avx2`	`clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`optimizedct/avx2`	`clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`optimizedct/avx2`	`clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`optimizedct/avx2`	`gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`
`optimizedct/avx2`	`gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`
`optimizedct/avx2`	`gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (10.2.1_20210110)`
`optimizedct/avx2`	`gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`

Namespace violations

KeccakHashtimes4.o Keccak_HashFinaltimes4 T
KeccakHashtimes4.o Keccak_HashInitializetimes4 T
KeccakHashtimes4.o Keccak_HashSqueezetimes4 T
KeccakHashtimes4.o Keccak_HashUpdatetimes4 T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorb T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorbLastFewBits T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeInitialize T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeSqueeze T
compat.o picnic_explicit_bzero T
compat.o picnic_timingsafe_bcmp T
io.o mzd_from_char_array T
io.o mzd_to_char_array T
lowmc.o lowmc_compute T
lowmc.o lowmc_record_state T
lowmc_192_192_4.o lowmc_192_192_4 D
mpc_lowmc.o get_zkbpp_lowmc_implementation T
mpc_lowmc.o get_zkbpp_lowmc_verify_implementation T
mpc_lowmc.o get_zkbpp_share_implentation T
mzd_additional.o mzd_addmul_v_uint64_128 T
mzd_additional.o mzd_addmul_v_uint64_129 T
mzd_additional.o mzd_addmul_v_uint64_192 T
mzd_additional.o mzd_addmul_v_uint64_256 T
mzd_additional.o mzd_and_uint64_128 T
mzd_additional.o mzd_and_uint64_192 T
mzd_additional.o mzd_and_uint64_256 T
mzd_additional.o mzd_copy_uint64_128 T
mzd_additional.o mzd_copy_uint64_192 T
mzd_additional.o mzd_copy_uint64_256 T
mzd_additional.o mzd_local_init_ex T
mzd_additional.o mzd_mul_v_uint64_128 T
mzd_additional.o mzd_mul_v_uint64_129 T
mzd_additional.o mzd_mul_v_uint64_192 T
mzd_additional.o mzd_mul_v_uint64_256 T
mzd_additional.o mzd_shift_left_uint64_128 T
mzd_additional.o mzd_shift_left_uint64_192 T
mzd_additional.o mzd_shift_left_uint64_256 T
mzd_additional.o mzd_shift_right_uint64_128 T
mzd_additional.o mzd_shift_right_uint64_192 T
mzd_additional.o mzd_shift_right_uint64_256 T
mzd_additional.o mzd_xor_uint64_128 T
mzd_additional.o mzd_xor_uint64_192 T
mzd_additional.o mzd_xor_uint64_256 T
picnic.o picnic_clear_private_key T
picnic.o picnic_get_lowmc_block_size T
picnic.o picnic_get_param_name T
picnic.o picnic_get_private_key_param T
picnic.o picnic_get_private_key_size T
picnic.o picnic_get_public_key_param T
picnic.o picnic_get_public_key_size T
picnic.o picnic_keygen T
picnic.o picnic_read_private_key T
picnic.o picnic_read_public_key T
picnic.o picnic_sign T
picnic.o picnic_signature_size T
picnic.o picnic_sk_to_pk T
picnic.o picnic_validate_keypair T
picnic.o picnic_verify T
picnic.o picnic_write_private_key T
picnic.o picnic_write_public_key T
picnic_impl.o picnic_impl_sign T
picnic_impl.o picnic_impl_verify T
picnic_instances.o picnic_instance_get T
randomness.o rand_bits T

Number of similar (implementation,compiler) pairs: 9, namely:

Implementation	Compiler
`optimizedct/c`	`clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`optimizedct/c`	`clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`optimizedct/c`	`clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`optimizedct/c`	`clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`optimizedct/c`	`clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`optimizedct/c`	`gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`
`optimizedct/c`	`gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`
`optimizedct/c`	`gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (10.2.1_20210110)`
`optimizedct/c`	`gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`

Namespace violations

KeccakHashtimes4.o Keccak_HashFinaltimes4 T
KeccakHashtimes4.o Keccak_HashInitializetimes4 T
KeccakHashtimes4.o Keccak_HashSqueezetimes4 T
KeccakHashtimes4.o Keccak_HashUpdatetimes4 T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorb T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorbLastFewBits T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeInitialize T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeSqueeze T
compat.o picnic_explicit_bzero T
compat.o picnic_timingsafe_bcmp T
io.o mzd_from_char_array T
io.o mzd_to_char_array T
lowmc.o lowmc_compute T
lowmc.o lowmc_record_state T
lowmc_192_192_4.o lowmc_192_192_4 D
mpc_lowmc.o get_zkbpp_lowmc_implementation T
mpc_lowmc.o get_zkbpp_lowmc_verify_implementation T
mpc_lowmc.o get_zkbpp_share_implentation T
mzd_additional.o mzd_addmul_v_s128_128 T
mzd_additional.o mzd_addmul_v_s128_129 T
mzd_additional.o mzd_addmul_v_s128_192 T
mzd_additional.o mzd_addmul_v_s128_256 T
mzd_additional.o mzd_addmul_v_uint64_128 T
mzd_additional.o mzd_addmul_v_uint64_129 T
mzd_additional.o mzd_addmul_v_uint64_192 T
mzd_additional.o mzd_addmul_v_uint64_256 T
mzd_additional.o mzd_and_s128_128 T
mzd_additional.o mzd_and_s128_256 T
mzd_additional.o mzd_and_uint64_128 T
mzd_additional.o mzd_and_uint64_192 T
mzd_additional.o mzd_and_uint64_256 T
mzd_additional.o mzd_copy_s128_128 T
mzd_additional.o mzd_copy_s128_256 T
mzd_additional.o mzd_copy_uint64_128 T
mzd_additional.o mzd_copy_uint64_192 T
mzd_additional.o mzd_copy_uint64_256 T
mzd_additional.o mzd_local_init_ex T
mzd_additional.o mzd_mul_v_s128_128 T
mzd_additional.o mzd_mul_v_s128_129 T
mzd_additional.o mzd_mul_v_s128_192 T
mzd_additional.o mzd_mul_v_s128_256 T
mzd_additional.o mzd_mul_v_uint64_128 T
mzd_additional.o mzd_mul_v_uint64_129 T
mzd_additional.o mzd_mul_v_uint64_192 T
mzd_additional.o mzd_mul_v_uint64_256 T
mzd_additional.o mzd_shift_left_uint64_128 T
mzd_additional.o mzd_shift_left_uint64_192 T
mzd_additional.o mzd_shift_left_uint64_256 T
mzd_additional.o mzd_shift_right_uint64_128 T
mzd_additional.o mzd_shift_right_uint64_192 T
mzd_additional.o mzd_shift_right_uint64_256 T
mzd_additional.o mzd_xor_s128_128 T
mzd_additional.o mzd_xor_s128_256 T
mzd_additional.o mzd_xor_uint64_128 T
mzd_additional.o mzd_xor_uint64_192 T
mzd_additional.o mzd_xor_uint64_256 T
picnic.o picnic_clear_private_key T
picnic.o picnic_get_lowmc_block_size T
picnic.o picnic_get_param_name T
picnic.o picnic_get_private_key_param T
picnic.o picnic_get_private_key_size T
picnic.o picnic_get_public_key_param T
picnic.o picnic_get_public_key_size T
picnic.o picnic_keygen T
picnic.o picnic_read_private_key T
picnic.o picnic_read_public_key T
picnic.o picnic_sign T
picnic.o picnic_signature_size T
picnic.o picnic_sk_to_pk T
picnic.o picnic_validate_keypair T
picnic.o picnic_verify T
picnic.o picnic_write_private_key T
picnic.o picnic_write_public_key T
picnic_impl.o picnic_impl_sign T
picnic_impl.o picnic_impl_verify T
picnic_instances.o picnic_instance_get T
randomness.o rand_bits T

Number of similar (implementation,compiler) pairs: 9, namely:

Implementation	Compiler
`optimizedct/sse2`	`clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`optimizedct/sse2`	`clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`optimizedct/sse2`	`clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`optimizedct/sse2`	`clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`optimizedct/sse2`	`clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`optimizedct/sse2`	`gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`
`optimizedct/sse2`	`gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`
`optimizedct/sse2`	`gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (10.2.1_20210110)`
`optimizedct/sse2`	`gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`

Namespace violations

api.o params D
hash.o HashFinal T
hash.o HashInit T
hash.o HashSqueeze T
hash.o HashUpdate T
hash.o HashUpdateIntLE T
hash.o fromLittleEndian T
hash.o toLittleEndian T
lowmc_constants.o KMatrix T
lowmc_constants.o KMatrixInv T
lowmc_constants.o LMatrix T
lowmc_constants.o LMatrixInv T
lowmc_constants.o RConstant T
picnic.o get_param_set T
picnic.o get_transform T
picnic.o is_picnic3 T
picnic.o picnic_get_param_name T
picnic.o picnic_keygen T
picnic.o picnic_read_private_key T
picnic.o picnic_read_public_key T
picnic.o picnic_sign T
picnic.o picnic_signature_size T
picnic.o picnic_validate_keypair T
picnic.o picnic_verify T
picnic.o picnic_write_private_key T
picnic.o picnic_write_public_key T
picnic.o print_signature T
picnic3_impl.o ceil_log2 T
picnic3_impl.o deserializeSignature2 T
picnic3_impl.o serializeSignature2 T
picnic3_impl.o sign_picnic3 T
picnic3_impl.o verify_picnic3 T
picnic_impl.o Commit T
picnic_impl.o G T
picnic_impl.o H3 T
picnic_impl.o LowMCEnc T
picnic_impl.o arePaddingBitsZero T
picnic_impl.o computeSeeds T
picnic_impl.o createRandomTape T
picnic_impl.o deserializeSignature T
picnic_impl.o getBit T
picnic_impl.o getBitFromWordArray T
picnic_impl.o getChallenge T
picnic_impl.o matrix_mul T
picnic_impl.o mpc_AND T
picnic_impl.o mpc_AND_verify T
picnic_impl.o mpc_LowMC T
picnic_impl.o mpc_LowMC_verify T
picnic_impl.o mpc_matrix_mul T
picnic_impl.o mpc_substitution T
picnic_impl.o mpc_substitution_verify T
picnic_impl.o mpc_xor T
picnic_impl.o mpc_xor_constant T
picnic_impl.o mpc_xor_constant_verify T
picnic_impl.o numBytes T
picnic_impl.o parity T
picnic_impl.o printHex T
picnic_impl.o prove T
picnic_impl.o random_bytes_supercop T
picnic_impl.o serializeSignature T
picnic_impl.o setBit T
picnic_impl.o setBitInWordArray T
picnic_impl.o setChallenge T
picnic_impl.o sign_picnic1 T
picnic_impl.o verify T
picnic_impl.o verifyProof T
picnic_impl.o xor_array T
picnic_impl.o xor_three T
picnic_impl.o zeroTrailingBits T
picnic_types.o allocateCommitments T
picnic_types.o allocateCommitments2 T
picnic_types.o allocateGCommitments T
picnic_types.o allocateInputs T
picnic_types.o allocateMsgs T
picnic_types.o allocateProof T
picnic_types.o allocateProof2 T
picnic_types.o allocateRandomTape T
picnic_types.o allocateSeeds T
picnic_types.o allocateShares T
picnic_types.o allocateSignature T
picnic_types.o allocateSignature2 T
picnic_types.o allocateView T
picnic_types.o allocateViews T
picnic_types.o freeCommitments T
picnic_types.o freeCommitments2 T
picnic_types.o freeGCommitments T
picnic_types.o freeInputs T
picnic_types.o freeMsgs T
picnic_types.o freeProof T
picnic_types.o freeProof2 T
picnic_types.o freeRandomTape T
picnic_types.o freeSeeds T
picnic_types.o freeShares T
picnic_types.o freeSignature T
picnic_types.o freeSignature2 T
picnic_types.o freeView T
picnic_types.o freeViews T
picnic_types.o getTapeSizeBytes T
tree.o addMerkleNodes T
tree.o buildMerkleTree T
tree.o createTree T
tree.o exists T
tree.o expandSeeds T
tree.o freeTree T
tree.o generateSeeds T
tree.o getLeaf T
tree.o getLeaves T
tree.o getParent T
tree.o getSibling T
tree.o hasLeftChild T
tree.o hasRightChild T
tree.o hasSibling T
tree.o hashSeed T
tree.o isLeafNode T
tree.o isLeftChild T
tree.o openMerkleTree T
tree.o openMerkleTreeSize T
tree.o printLeaves T
tree.o printSeeds T
tree.o reconstructSeeds T
tree.o revealSeeds T
tree.o revealSeedsSize T
tree.o verifyMerkleTree T

Number of similar (implementation,compiler) pairs: 9, namely:

Implementation	Compiler
`T:ref`	`clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`T:ref`	`clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`T:ref`	`clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`T:ref`	`clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`T:ref`	`clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`T:ref`	`gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`
`T:ref`	`gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`
`T:ref`	`gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (10.2.1_20210110)`
`T:ref`	`gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x116A9D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: rand_bytes (randomness.c:24)
   by 0x...: rand_bits (randomness.c:143)
   by 0x...: picnic_keygen (picnic.c:116)
   by 0x...: crypto_sign_picnicl3full_optimizedct_avx2_constbranchindex_keypair (sign.c.i:22)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`optimizedct/avx2`	`clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x11A12D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: rand_bytes (randomness.c:24)
   by 0x...: rand_bits (randomness.c:143)
   by 0x...: picnic_keygen (picnic.c:116)
   by 0x...: crypto_sign_picnicl3full_optimizedct_avx2_constbranchindex_keypair (sign.c.i:22)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`optimizedct/avx2`	`clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x1153AD
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: rand_bytes (randomness.c:24)
   by 0x...: rand_bits (randomness.c:143)
   by 0x...: picnic_keygen (picnic.c:116)
   by 0x...: crypto_sign_picnicl3full_optimizedct_avx2_constbranchindex_keypair (sign.c.i:22)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`optimizedct/avx2`	`clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10B7B4
   at 0x...: core (try-anything.c:73)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:124)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`optimizedct/avx2`	`clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x119E7D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: rand_bytes (randomness.c:24)
   by 0x...: rand_bits (randomness.c:143)
   by 0x...: picnic_keygen (picnic.c:116)
   by 0x...: crypto_sign_picnicl3full_optimizedct_avx2_constbranchindex_keypair (sign.c.i:22)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`optimizedct/avx2`	`clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10B770
   at 0x...: core (try-anything.c:68)
   by 0x...: salsa20.part.0 (try-anything.c:101)
   by 0x...: salsa20 (try-anything.c:85)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:124)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`optimizedct/avx2`	`gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10B9E6
   at 0x...: st32 (try-anything.c:47)
   by 0x...: core (try-anything.c:78)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: salsa20 (try-anything.c:81)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:124)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`optimizedct/avx2`	`gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x11518D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: rand_bytes (randomness.c:24)
   by 0x...: rand_bits (randomness.c:143)
   by 0x...: picnic_keygen (picnic.c:116)
   by 0x...: crypto_sign_picnicl3full_optimizedct_avx2_constbranchindex_keypair (sign.c.i:22)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`optimizedct/avx2`	`gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (10.2.1_20210110)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x1134DD
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: rand_bytes (randomness.c:24)
   by 0x...: rand_bits (randomness.c:143)
   by 0x...: picnic_keygen (picnic.c:116)
   by 0x...: crypto_sign_picnicl3full_optimizedct_avx2_constbranchindex_keypair (sign.c.i:22)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`optimizedct/avx2`	`gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x11331D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: rand_bytes (randomness.c:24)
   by 0x...: rand_bits (randomness.c:143)
   by 0x...: picnic_keygen (picnic.c:116)
   by 0x...: crypto_sign_picnicl3full_optimizedct_c_constbranchindex_keypair (sign.c.i:22)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`optimizedct/c`	`clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x11616D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: rand_bytes (randomness.c:24)
   by 0x...: rand_bits (randomness.c:143)
   by 0x...: picnic_keygen (picnic.c:116)
   by 0x...: crypto_sign_picnicl3full_optimizedct_c_constbranchindex_keypair (sign.c.i:22)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`optimizedct/c`	`clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x1112FD
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: rand_bytes (randomness.c:24)
   by 0x...: rand_bits (randomness.c:143)
   by 0x...: picnic_keygen (picnic.c:116)
   by 0x...: crypto_sign_picnicl3full_optimizedct_c_constbranchindex_keypair (sign.c.i:22)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`optimizedct/c`	`clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10A5D4
   at 0x...: core (try-anything.c:73)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:124)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 2, namely:

Implementation	Compiler
`optimizedct/c`	`clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`
`optimizedct/sse2`	`clang -march=native -Os -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x1152FD
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: rand_bytes (randomness.c:24)
   by 0x...: rand_bits (randomness.c:143)
   by 0x...: picnic_keygen (picnic.c:116)
   by 0x...: crypto_sign_picnicl3full_optimizedct_c_constbranchindex_keypair (sign.c.i:22)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`optimizedct/c`	`clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10A590
   at 0x...: core (try-anything.c:68)
   by 0x...: salsa20.part.0 (try-anything.c:101)
   by 0x...: salsa20 (try-anything.c:85)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:124)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 2, namely:

Implementation	Compiler
`optimizedct/c`	`gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`
`optimizedct/sse2`	`gcc -march=native -mtune=native -O2 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10A806
   at 0x...: st32 (try-anything.c:47)
   by 0x...: core (try-anything.c:78)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: salsa20 (try-anything.c:81)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:124)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 2, namely:

Implementation	Compiler
`optimizedct/c`	`gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`
`optimizedct/sse2`	`gcc -march=native -mtune=native -O3 -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x111CCD
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: rand_bytes (randomness.c:24)
   by 0x...: rand_bits (randomness.c:143)
   by 0x...: picnic_keygen (picnic.c:116)
   by 0x...: crypto_sign_picnicl3full_optimizedct_c_constbranchindex_keypair (sign.c.i:22)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`optimizedct/c`	`gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (10.2.1_20210110)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x11037D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: rand_bytes (randomness.c:24)
   by 0x...: rand_bits (randomness.c:143)
   by 0x...: picnic_keygen (picnic.c:116)
   by 0x...: crypto_sign_picnicl3full_optimizedct_c_constbranchindex_keypair (sign.c.i:22)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`optimizedct/c`	`gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x1140FD
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: rand_bytes (randomness.c:24)
   by 0x...: rand_bits (randomness.c:143)
   by 0x...: picnic_keygen (picnic.c:116)
   by 0x...: crypto_sign_picnicl3full_optimizedct_sse2_constbranchindex_keypair (sign.c.i:22)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`optimizedct/sse2`	`clang -march=native -O2 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x116B3D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: rand_bytes (randomness.c:24)
   by 0x...: rand_bits (randomness.c:143)
   by 0x...: picnic_keygen (picnic.c:116)
   by 0x...: crypto_sign_picnicl3full_optimizedct_sse2_constbranchindex_keypair (sign.c.i:22)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`optimizedct/sse2`	`clang -march=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x112ABD
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: rand_bytes (randomness.c:24)
   by 0x...: rand_bits (randomness.c:143)
   by 0x...: picnic_keygen (picnic.c:116)
   by 0x...: crypto_sign_picnicl3full_optimizedct_sse2_constbranchindex_keypair (sign.c.i:22)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`optimizedct/sse2`	`clang -march=native -O -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x11645D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: rand_bytes (randomness.c:24)
   by 0x...: rand_bits (randomness.c:143)
   by 0x...: picnic_keygen (picnic.c:116)
   by 0x...: crypto_sign_picnicl3full_optimizedct_sse2_constbranchindex_keypair (sign.c.i:22)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`optimizedct/sse2`	`clang -mcpu=native -O3 -fwrapv -Qunused-arguments -fPIC -fPIE -gdwarf-4 -Wall (Debian_Clang_14.0.6)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x1127AD
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: rand_bytes (randomness.c:24)
   by 0x...: rand_bits (randomness.c:143)
   by 0x...: picnic_keygen (picnic.c:116)
   by 0x...: crypto_sign_picnicl3full_optimizedct_sse2_constbranchindex_keypair (sign.c.i:22)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`optimizedct/sse2`	`gcc -march=native -mtune=native -O -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (10.2.1_20210110)`

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x110E8D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: rand_bytes (randomness.c:24)
   by 0x...: rand_bits (randomness.c:143)
   by 0x...: picnic_keygen (picnic.c:116)
   by 0x...: crypto_sign_picnicl3full_optimizedct_sse2_constbranchindex_keypair (sign.c.i:22)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

Number of similar (implementation,compiler) pairs: 1, namely:

Implementation	Compiler
`optimizedct/sse2`	`gcc -march=native -mtune=native -Os -fwrapv -fPIC -fPIE -gdwarf-4 -Wall (12.2.0)`